foodpanda

Is foodpanda safe to use?

foodpanda is safe enough for ordering a meal, but it is not a private app. We found no confirmed breach of foodpanda customer accounts, and the app does not deal in user posts or messages that could expose you to strangers. The weak point is advertising: Apple's privacy label lists your precise location, search history and device identifiers as data used to track you across other companies' apps. We score it 56/100, close to Deliveroo (55) and below Wolt (60).

Who is behind the app

foodpanda is Delivery Hero's brand in Asia. The app is published by a Polish group company, Internet Services Polen, and each market has its own operator. In Singapore that is Delivery Hero (Singapore) Pte. Ltd., which its privacy policy names as the company that decides how your data is used.

Ownership is in flux. Delivery Hero agreed in March 2026 to sell its Taiwan business to Grab for US$600 million, but on 21 October 2026 Taiwan's Fair Trade Commission refused to approve the deal. Delivery Hero said the decision can be appealed. Separately, Uber offered in July 2026 to buy Delivery Hero for €41.50 a share in cash, an equity value it put at US$14.8 billion. foodpanda in Singapore, Malaysia, Pakistan, the Philippines, Hong Kong, Bangladesh, Cambodia, Laos and Myanmar would come under Uber; the offer still needs merger and financial clearances, and Delivery Hero said in September 2026 that the takeover was under way. foodpanda left Thailand in May 2025, and Thailand's data protection regulator told it to file a plan for deleting and protecting Thai users' data before it went.

What foodpanda tracks

The two app stores disagree. Google Play says foodpanda shares no user data with other companies. Apple's label is far broader: precise location, search history, user and device IDs and advertising data may be used to track you, and IDs and ad data are linked to you for third-party advertising. Where a label and a policy differ, we score the broader one.

The Singapore privacy policy, in the version archived in August 2025, explains what the label means. foodpanda builds customer segments from your account, location and order data and from cookies, SDKs and pixels, and these segments can include predictions of your age and gender. It uses them for targeted ads on its own platform and on third-party websites and social networks. The policy says it asks for your explicit consent first, and that without it you still see ads, just generic ones.

Your data also leaves the country. Delivery Hero SE in Berlin is the main cloud provider for the platform, and the policy says data can go to the group's tech hubs elsewhere. It says foodpanda will not sell or rent your personal information without your explicit, informed consent.

Security record

We found no confirmed breach of foodpanda customer accounts in the last ten years. Google Play says data is encrypted in transit and that you can ask for it to be deleted. The gap is outside testing: we found no foodpanda or Delivery Hero programme on HackerOne, Bugcrowd, Intigriti or YesWeHack, and no public vulnerability disclosure page we could open. Apps that pay researchers, such as Wolt, score higher on security for that reason.

The everyday risk is phishing. Fake riders and "support" agents may contact you about a real order and ask for a one-time code or card details. foodpanda's support runs through the app, so treat any outside call or message about a refund with suspicion.

Fines and orders

foodpanda's record is about how it sells, not about leaked data.

• Singapore, November 2024. The Competition and Consumer Commission of Singapore (CCCS) warned foodpanda over Pandapro ads promising "unlimited free delivery on all restaurants". Subscribers in fact got S$3 off delivery, or up to S$6 at some restaurants, and the CCCS found that over 40% of their deliveries still carried a fee. foodpanda was asked to refund the subscription fees of people who joined between 1 July and 30 September 2024.
• Taiwan, 2021. The Fair Trade Commission fined foodpanda NT$2 million for making partner restaurants charge the same prices for delivery as in store and limiting their own delivery services.
• Bangladesh, January 2024. The Bangladesh Competition Commission fined Foodpanda Bangladesh Tk 10 lakh for abusing its dominant position, after a restaurant complained that it threatened to raise commissions and cut delivery radius. It also barred foodpanda from stopping restaurants from joining other platforms.

Both competition fines concern restaurants, not customers, so they count at half weight.

In June 2025 the European Commission fined Delivery Hero and Glovo €329 million for a cartel in Europe. The decision does not name foodpanda, so we treat it as background only.

How to use foodpanda more safely

1. On iPhone, tap "Ask App Not to Track", and turn off location access when you are not ordering.
2. Refuse consent for personalised ads when the app asks; the policy says ads then stop being tailored to you.
3. Read the terms of any Pandapro offer. "Free delivery" may mean a fixed discount.
4. Never give a one-time code or card details to someone who calls or messages about an order. Open the app and use its help section instead.
5. If you stop using foodpanda, delete your data from your profile rather than just removing the app.

How we scored it

Regulatory record (74) is foodpanda's strongest factor: a Singapore consumer warning and two small competition fines over restaurant terms, with no privacy fine. Privacy (42) is the weakest, because Apple's label lists location, search history and identifiers as used to track you even though Google Play reports no sharing. Security (58) is held back by the lack of any public bug bounty. If you are in Southeast Asia and comparing apps, see Grab.