Legit.Show is a directory of launched web apps, SaaS, AI tools, MCP servers and developer tools — each with an objective 7-Frame production-readiness benchmark, measured deterministically from the public surface. How we measure →

Legit.Show benchmarks every launched service it lists — measured deterministically from the public surface. See the methodology →

Cross-links · Directory · Reports · Methodology · About

Privacy · Terms · operated by Madeflo Inc., a Delaware corporation. Benchmark engine powered by commit.show.

the consent gap · 2026 edition

The Privacy Gap · 2026

We measured what 1000 launched web apps, SaaS and AI tools do with your data before you ever sign in — including whether they track you without asking.

51%
ship with no terms of service
across 1000 web apps we measured · according to Legit.Show · 2026

The findings

How much do they disclose

By category

What this measures

Public-surface privacy posture, on the page before you sign in: a reachable privacy policy, a terms page, and consent integrity — whether non-essential trackers fire *before* you consent. We score the behavior, not the presence of a banner: a site that sets no trackers needs no banner and passes. Hygiene and compliance signals, not legal advice — 1000 tested web services as of 2026-07-27; consent integrity measured on 120 so far.

Why it’s everywhere

The basics go first: 51% no terms of service. And a consent banner is theater — what matters is what fires before you click it: of the 120 services measured for consent integrity so far, 33% set non-essential trackers with no consent at all. It isn’t malice — it’s the unglamorous last 10% a demo drops in and a launch never revisits.

Sample composition

Not a random sample — this is what we measured. The mix below is the caveat; judge it for yourself.

What we measured (1000)

The full list, so anyone can spot-check. Every item links to its public benchmark.

How this was measured →