Every "free" app is paid for by someone. The money almost always comes from one of six places: paying subscribers (freemium), donors and grants, advertisers, data partnerships, search and affiliate deals, or a parent company using the free app as a funnel toward a paid product. Once you know which of these you're looking at, most of the mystery around "how is this free?" disappears.
The risk to you depends almost entirely on the model. When revenue comes from a visible source — a paid tier, a nonprofit's donation page, an enterprise edition — the app has little reason to monetize your attention or your data. When you can't find any revenue source at all, that's the app that deserves a closer look before it earns a place on your devices.
Key takeaways
- Every free app pays its bills somehow. The real question is who pays: you later, other users, advertisers, data buyers, or a parent company.
- Freemium and donation-funded models are the most transparent — the revenue source is visible and doesn't depend on your data.
- Ad-funded apps aren't automatically bad, but the incentive to collect behavioral data grows as the ad business grows.
- The riskiest free app is the one with no visible revenue source at all.
- A five-minute check — pricing page, ownership, privacy policy, permissions — identifies the model for most mainstream apps.
The six models, in plain terms
1. Freemium: paying users fund everyone
Freemium apps give you a genuinely useful free tier and sell upgrades — more storage, more devices, family or business features. Bitwarden and Proton Mail both work this way: the free tier is real, and paid subscriptions keep the lights on.
This is one of the healthiest alignments in software. The company's incentive is to make the product good enough that some users upgrade — not to squeeze value out of the ones who don't.
2. Donations, grants, and foundations
Some of the most trusted free software is run by nonprofits and funded by donations. Signal is operated by a nonprofit foundation, and VLC comes from a nonprofit volunteer project that has kept it free for decades.
There's no hidden monetization here because there's nothing to hide — the donate button is the business model. The honest trade-off is sustainability: development speed depends on funding, and funding depends on goodwill.
3. Advertising
Ads pay for a huge share of the free software world. The spectrum matters, though. Contextual ads (based on what you're currently viewing) need little data about you. Behavioral ads (based on who you are and what you do everywhere) are built on tracking, and the more the ad business grows, the more data it wants.
An ad-funded app isn't automatically a problem. But it's the model where "free" and "your data" are most likely to be connected, so it's worth reading how the app describes its advertising in its privacy policy.
4. Data monetization
Some free apps earn revenue from data more directly — through embedded analytics and advertising SDKs, data partnerships, or the sale of aggregated usage insights. This is usually disclosed, but the disclosure tends to live deep in a privacy policy under headings like "third parties" or "partners."
From the outside, this model is the hardest to spot, which is exactly why it deserves the most scrutiny. If an app has no paid tier, no ads you can see, and no nonprofit behind it, data is one of the few explanations left.
5. Search and affiliate deals
Browsers are the classic case: a free browser can earn revenue by making a search engine the default, or by building an opt-in ad and rewards system. Our Firefox vs Brave comparison looks at two well-known — and quite different — takes on this model. Other apps earn affiliate commissions when you buy something they recommend.
For users, this model is usually low-risk. The main thing to watch is defaults: know which search engine, home page, or shopping suggestions the deal is paying for, and change them if you prefer.
6. The corporate funnel
Finally, some free apps exist to pull you toward something paid: a free personal tier that feeds business sales, an open-source core with a paid cloud service, or a free utility that showcases a company's flagship product. Nobody is monetizing you directly — you're marketing.
This model is generally safe for individuals. Just expect product decisions to favor the funnel: the features that push teams toward the paid edition will always get attention first.
Side-by-side: who pays, and what it means for you
| Model | Who actually pays | Typical signs | Main risk to you |
|---|---|---|---|
| Freemium | Paying subscribers | Pricing page with a real free tier | Upsell pressure, not data |
| Donations & grants | Donors, foundations | Nonprofit status, donate button | Funding gaps, slower development |
| Advertising | Advertisers | Visible ads, "remove ads" upgrade | Tracking grows with the ad business |
| Data monetization | Data buyers & partners | No visible revenue, tracker-heavy app | Your behavior is the inventory |
| Search & affiliate | Search engines, merchants | Default-search deals, referral links | Unwanted defaults, mostly low risk |
| Corporate funnel | Business customers | Enterprise/cloud editions upsold | Roadmap favors paying customers |
How to tell which kind you have
You can identify the model for most apps in about five minutes:
- Find the pricing page. A paid tier means freemium or a corporate funnel — both visible, both reasonably healthy.
- Check who's behind it. A nonprofit foundation, a known company, or no identifiable owner at all? The last one is a red flag on its own.
- Skim the privacy policy for "third parties" and "advertising." You don't need to read all of it — those two sections carry most of the signal.
- Check the license model. Open source doesn't guarantee a good business model, but it means the code can be independently audited. Directories like our app catalog label the license model up front.
- Look at the permissions. A free app requesting access it can't plausibly need for its features is telling you something about where its value comes from.
This is essentially the same question we ask in our own review methodology: before trusting an app, we want to know who funds it and why it exists. It's also why so many of the apps in our privacy essentials list are donation-funded or freemium — those models simply don't need your data to survive.
FAQ
Is a free app automatically unsafe?
No. Some of the most trusted software available is completely free — funded by donations, foundations, or paid tiers that other people buy. "Free" tells you the price, not the risk. The model behind the price is what tells you the risk.
Is open source always the safer choice?
Open source means the code can be inspected by anyone, which is a genuine trust advantage. But it describes the license, not the funding — open-source projects still need money, and the same six models apply. A well-funded freemium open-source app can be a stronger long-term bet than an unfunded volunteer project.
What does "if you're not paying, you're the product" actually mean?
It's shorthand for the ad and data models, where your attention and behavior are what's being sold. As a universal rule it's wrong — donation-funded and freemium apps disprove it daily. The more useful version: if you can't figure out who pays, assume it might be you, and dig until you know.
The bottom line
Free is a price, not a business model — and the business model is what actually determines whether a free app respects you. Spend the five minutes, find the money, and choose apps whose incentives point the same direction as yours. Features and pricing change, so always check the official site for current plans before deciding.