Skip to content
SafetyScorer

Is Sendit safe?

Sendit

Sendit, the anonymous Q&A app for Snapchat and Instagram stories, is being sued by the US Justice Department for the FTC over fake messages, a misleading paid "reveal" and data taken from children under 13. A judge refused to dismiss the case in April 2026, and the app is still rated 13+.

High confidence#47 of 47 in Social media
Updated
Spot a mistake?

#47of 47 in Social media

High confidence
Agree with our score?
Owner
Iconic Hearts Holdings, Inc. (Los Angeles), CEO Hunter Rice
Age rating
13+ (App Store), Teen (Google Play); terms allow users from 13
Federal lawsuit
United States v. Iconic Hearts, filed September 2025; jury trial set for 30 November 2027
Fake messages
279 million or more sent from 2021 to at least 2024, according to the complaint
Paid hints
Diamond Membership up to $9.99 a week; a one-off "reveal" for $29.99
Google Play label
Says data is not encrypted in transit; device IDs shared for ads
Privacy policy
Last updated 1 March 2023
NCMEC reports
Iconic Hearts is not in NCMEC's lists of reporting companies for 2024 or 2025

How the score breaks down

The overall score is the weighted average of these factors. Scoring rules

  • Privacy30% of score

    30 out of 100, Poor

    Apple's label lists usage data used to track you and contacts and identifiers linked to you. The 2023 policy lets Iconic Hearts share contact data, inferences and location with ad networks and marketing partners. The complaint says it collected phone numbers, photos and birthdates from over 116,000 self-declared under-13s in 2022 without parental consent.

  • Security30% of score

    32 out of 100, Poor

    Sendit's own Google Play label says data is not encrypted in transit. Messages are not End-to-end encryptionEncryption in which only the sender and the recipient can read a message. The company running the service cannot see its content.More in the glossary, the policy promises only "reasonable steps", and we found no bug bounty on HackerOne or Bugcrowd and no security page. We found no reported breach.

  • Transparency and control15% of score

    38 out of 100, Poor

    Google Play says you can request deletion, but the privacy policy dates from March 2023 and gives no retention periods. The complaint says weekly billing was shown only in small, low-contrast text, and the terms refuse all refunds.

  • Scams and harmful content15% of score

    25 out of 100, Poor

    The complaint says Sendit sent 279 million or more unlabelled fake messages, some adult-themed, to push a paid reveal, and was marketed to users as young as 12. The app stays open to 13-year-olds, and Iconic Hearts is not listed among companies that filed CyberTipline reports with NCMEC in 2024 or 2025.

  • Regulatory record10% of score

    63 out of 100, Fair

    In September 2025 the Justice Department, on an FTC referral, sued Iconic Hearts and its CEO under COPPA, the FTC Act and ROSCA. The court denied a motion to dismiss on 13 April 2026, mediation failed in October 2026 and trial is set for November 2027. A pending federal suit with no ruling sits in the 60 to 70 band.

Is Sendit safe?

No, and especially not for the young teenagers it has courted. Sendit lets you post a prompt such as "ask me anything" to your Snapchat or Instagram story and collect anonymous replies inside the app. In September 2025 the US Justice Department, acting for the Federal Trade Commission, sued its maker, Iconic Hearts, and CEO Hunter Rice. The government says the company sent hundreds of millions of fake messages to sell a paid "reveal", billed users weekly without clear notice and collected data from more than 116,000 children under 13. A federal judge refused to throw the case out in April 2026, and it is heading for a jury trial in late 2027. The app is still rated 13+. We score it 34/100, below NGL (38), which settled similar charges in 2024.

What the government says Sendit did

These are allegations; Iconic Hearts is contesting the case and no court has ruled on the facts. According to the complaint, as summarised in the judge's April 2026 order:

  • Fake messages at scale. From 2021 to at least 2024, Sendit sent 279 million or more fake replies, chosen from a stock of over 175 lines. Staff called them "engagement posts". They included "have you done drugs", "Does size matter" and "I know what you did", and until about late 2024 they were not labelled as coming from the company.
  • A reveal that did not reveal. Each fake message came with a "who sent it?" button leading to Diamond Membership, at $8.99 or $9.99 a week. Buyers of hints on fake messages got false information; on real ones, generic details such as location or phone type.
  • Hidden renewal. The weekly billing appeared only in small, low-contrast text under the buy button.
  • Children under 13. In 2022 more than 116,000 users entered a birth date showing they were under 13, and parents complained directly. The company collected names, contacts, phone numbers, location, birthdates, photos and social media usernames without telling parents or getting their consent.
  • Aimed at the young. Rice built the app with input from a 13-year-old relative, the company paid teen influencers, ran a "schools" feature for finding classmates, and at times marketed Sendit to "users as young as 12".

Judge Dale S. Fischer denied the motion to dismiss on 13 April 2026. Court-ordered mediation ended without agreement on 9 October 2026, and the trial is set for 30 November 2027.

What Sendit is like today

The basic design has not changed. Diamond Membership still sells hints about senders, the App Store lists a one-off "sendit reveal" for $29.99 alongside weekly plans, and the Google Play listing now also promotes an "AI Clone" that answers questions in your style. Iconic Hearts' website still describes its mission as becoming the place where "every social interaction for gen alpha can happen", the generation the complaint says is no older than 13 at the start of 2024.

Sendit's safety page describes word filters, blocking, the option to pause your link, in-app reporting and a "Community Team" that reviews reports. Its child-safety policy says it will report child sexual exploitation to NCMEC where the law requires. US companies must report child sexual abuse material they become aware of, but NCMEC's published lists of companies that filed CyberTipline reports in 2024 and 2025 do not include Iconic Hearts or Sendit. That does not prove material went unreported, but it is an unusual gap for an app with more than 1.5 million App Store ratings and a young audience.

How much data Sendit collects

The privacy policy was last updated on 1 March 2023 and covers Sendit and the company's other apps. It allows Iconic Hearts to collect your phone contacts if you grant access, your social media usernames, approximate location and usage data, and to share contact details, "inferences" and location with marketing companies, ad networks and "distributors and dealers". Your friends can upload your number from their own contacts even if you never joined.

Apple's label is shorter: usage data used to track you, and contacts, identifiers and usage data linked to you. Google Play's label says device IDs are shared for advertising and, unusually, that the developer's data "isn't encrypted" and is not sent over a secure connection. We take the developer's own declaration at its word; it is the main reason for the low security score.

Who should be careful

Parents of anyone under 16 first. If your child uses Sendit:

  1. Explain that some anonymous messages may come from the app itself, not from a friend, and that a reply like "I know what you did" is often a sales tool.
  2. Do not buy Diamond or a reveal. The hints do not name anyone, the plan renews weekly, and the terms rule out refunds. Cancel through the App Store or Google Play subscriptions page, not by deleting the app.
  3. Turn off contact access in the phone's settings and leave the school field empty.
  4. Pause or remove the Sendit link from stories if messages turn hurtful, and keep screenshots of threats before blocking.

For teenagers who want questions from friends, a question sticker on Instagram or Snapchat gives similar fun with names attached and without a second company collecting data.

How we scored it

Scams and harmful content (25) is the weakest factor: the complaint describes fake, sometimes adult-themed messages sent at enormous scale to an audience that includes 13-year-olds. Security (32) reflects the developer's own declaration that data is not encrypted in transit, and privacy (30) the alleged collection of children's data and broad sharing for ads. Regulatory record (63) is the strongest factor only because the federal case has no ruling yet; a judgment or settlement would move it.

Questions people ask

Are Sendit messages real?

Not always. The US government's complaint says that from 2021 to at least 2024 Iconic Hearts sent 279 million or more fake messages, drawn from a stock of over 175 lines such as "have you done drugs" and "I know what you did", made to look like replies from your friends. Until about late 2024 they carried no label. Iconic Hearts is contesting the case, and the court has not ruled.

Does Sendit Diamond show who sent a message?

Not by name. According to the complaint, buyers got generic hints such as location or phone type for real senders, and false information for the fake ones. Diamond Membership renews weekly at up to $9.99, and the App Store also lists a one-off "sendit reveal" for $29.99. Sendit's terms say subscriptions are not refunded.

What age is Sendit for?

Sendit's terms allow users from 13, with parental consent under 18, and the App Store rates it 13+. The government says Sendit's website at times marketed the app to users as young as 12 and called it a "Gen Alpha" app. Buying a subscription requires being an 18-year-old US resident under the terms, though the app store does not check that.

Is the FTC case against Sendit over?

No. The Justice Department filed it in September 2025 in federal court in Los Angeles. Judge Dale S. Fischer denied Iconic Hearts' motion to dismiss in April 2026, court mediation ended without agreement in October 2026, and a jury trial is set for 30 November 2027.

Is Sendit the same as NGL?

No. They are rival apps from different companies that work the same way, through links on Snapchat and Instagram stories. NGL settled similar FTC charges in 2024, paid $5 million and was banned from serving under-18s. Sendit is still fighting its case and still accepts 13-year-olds.

Sources

  1. 1.FTC Alleges Sendit App and its CEO Unlawfully Collected Personal Data from Children, Deceived Users About Messages and Subscriptions (opens in a new tab) · US Federal Trade Commission, 2025
  2. 2.United States v. Iconic Hearts Holdings Inc., 2:25-cv-09310 (C.D. Cal.), docket (opens in a new tab) · CourtListener (PACER/RECAP), 2026
  3. 3.Order denying defendants' motion to dismiss (Dkt. 24), 13 April 2026 (opens in a new tab) · US District Court for the Central District of California, 2026
  4. 4.sendit App Store listing and App Privacy label (opens in a new tab) · Apple App Store, 2026
  5. 5.sendit Google Play data safety section (opens in a new tab) · Google Play, 2026
  6. 6.Iconic Hearts Privacy Policy (effective 1 March 2023) (opens in a new tab) · Iconic Hearts Holdings, Inc., 2023
  7. 7.Iconic Hearts Terms of Service (effective 1 March 2023) (opens in a new tab) · Iconic Hearts Holdings, Inc., 2023
  8. 8.2025 CyberTipline Reports by Electronic Service Providers (opens in a new tab) · National Center for Missing & Exploited Children, 2026
Spot a mistake?