List of the 28 tested VTO featuring Android apps. PP in the table header means privacy policy and TP means third-party. For the privacy policy columns, a means violated, a means ambiguous and a means not violated. For the ‘violation type’ columns, the numbers denote the violations as specified by the criteria defined in Section 3.3 of the OPC report. The mapping is as follows: (1) image sharing to server, (2) image storing, (3) image storage duration, (4) image sharing to third party, (5) image sharing to analytics services. A dash ‘-’ means not applicable.

App Package Name	Downloads	Pure VTO	Image sent to TP	Image stored	Own PP	Violation type	VTO provider's PP	Violation type	Grade
com.amazon.mShop.android.shopping	500m+					-		-
com.cyberlink.youcammakeup	100m+					-		-
com.arcsoft.perfect365	50m+					-		-
com.meitu.makeup	50m+					-		-
com.lenskart.app	10m+					2		-
com.target.ui	10m+					-		-
com.houzz.app	10m+					-		-
com.ingka.ikea.app	10m+					-		-
com.grymala.aruler	10m+					-		-
com.ulta	5m+					-		-
tattoo.inkhunter	5m+					-		-
com.gucci.gucciapp	1m+					-		-
com.ar.augment	1m+					-		-
com.zhanlang.changehaircut	1m+					-		-
com.perfectcorp.amb	1m+					-		-
com.zennioptical.app	500k+					-		-
com.standysoftware.colorstyle	500k+					-		-
com.grailify.grailify	500k+					-		-
com.xl.apps.virtual.glass.tryon	100k+					-		-
skglobal.product.glasson	100k+					-		-
com.follow.ElfCosmetics	100k+					-		-
com.ipol.arviewer.app	50k+					-		-
by.vipit.shopping.fashion.goodstyle_pro	10k+					-		-
com.PrimoLook.App	10k+					-		-
com.arty.artyhome	10k+					-		-
com.eyebuydirect.www.twa	10k+					-		-
skglobal.product.glasson.binocle	5k+					-		-
your.fitapp	1k+					4		-