JioHotstar

Is JioHotstar safe?

Mostly, if you stay inside the official app. JioHotstar streams licensed films, series and live cricket, with no open messaging between strangers, and we found no fine or data breach against it. We score it 53/100, below Disney+ (60) and Netflix (65).

Two things hold it back. The app collects and tracks more for advertising than most streaming services, and its privacy controls are thin. And the biggest danger for its viewers is outside the app: fake "free" cricket streams that carry malware.

How much JioHotstar tracks

Apple's privacy label for JioHotstar in India is long. Purchases, contact information, browsing history, identifiers and usage data may be used to track you across other companies' apps and websites, which is more than Hulu (identifiers only) or Netflix (no tracking section) declare. Linked to your identity are your name, email address, phone number, contacts, browsing and search history, purchase history, user content and precise location. Coarse location, physical address and crash data are collected but not linked to you.

The privacy notice, last updated on 27 May 2025, goes further. It allows JioStar to combine your profile with data from advertising networks and data providers, and to target ads using your location and your activity on every device. With your consent, it may also use:

• your precise GPS location, for local content and ads;
• information about the apps you use most often on your phone, to choose ads;
• information about "the content you are exposed to on the television", to personalise content, choose ads and measure your exposure to ads on other platforms;
• microphone access, which you can withdraw in the phone's settings.

Affiliate and group companies may use your data to market their own products and those of third parties. The notice says data built into your advertising profile, such as watch history, is kept "for the maximum period allowed by law".

What you can and cannot control

Controls are limited. You can see some of your details under My Account. Copies of your data and erasure are handled by email request, and the notice warns that erasure terminates your subscription "without any refunds". The only opt-out from interest-based ads it describes is the ad-ID setting on your phone or TV, which means you still see ads, just less targeted ones. Permissions for location and the microphone can be switched off in the device settings at any time.

India's Digital Personal Data Protection Act will give users stronger rights as its rules phase in, but no Indian regulator has yet ruled on how JioHotstar handles data. That is why its regulatory record scores high: there is no fine, but there has also been little scrutiny.

Fake streams and pirate apps

Cricket brings the scams. During the 2026 IPL season, CloudSEK reported more than 600 fake ticket-booking domains and over 400 fake free-streaming sites. Many of the stream sites looked real, with schedules and live scores, but ran redirects and malicious code, including fake update prompts that tricked Mac users into installing an information-stealing program.

JioStar fights the pirate side in court. During the ICC Men's T20 World Cup in 2026 it had 36 infringing apps removed from Google Play and the App Store, with more than 26 million downloads between them, and 141 piracy websites suspended under a dynamic injunction from the Delhi High Court; another 279 sites were blocked by internet providers. Those removals protect JioStar's rights, but they also show how many unofficial apps and sites are around. Any APK or "IPTV player" that promises free JioHotstar content is a malware risk.

Children and content

Content inside the app is licensed or made by JioStar, and the App Store lists parental controls and rates the app 13+. Kids mode limits a profile to child-friendly titles. The privacy notice is stricter than the store rating: it says nobody under 18 should register and that minors may use the service only with a parent's involvement. The app also has a Tadka tab of short micro-drama series, which the App Store description lists with genres such as revenge, mafia and betrayal; keep younger children on Kids mode.

How to use JioHotstar safely

1. Install only the app sold by JioStar India Private Limited, or use hotstar.com. Avoid "free" IPL streams and APK files.
2. Refuse the microphone and precise location permissions unless a feature needs them.
3. Refuse the tracking prompt on iPhone, or delete the advertising ID on Android, to reduce targeted ads.
4. Set Kids mode for children and do not share the account login with them.
5. Before asking for erasure, note that it ends your plan without a refund.

How we scored it

Regulatory record (86) is JioHotstar's strongest factor, because no fine or order was found, though no large privacy regulator has looked at the app either. Privacy (35) is the weakest: tracking across five data types and a policy that allows TV-viewing and installed-app data for ads. Transparency and control (45) reflects email-only data requests and an ad opt-out limited to the phone's settings. Confidence is low because the help centre and live privacy page are blocked outside India; we read an archived copy of the notice.