Gute Clients, Schlechte Clients

Some email clients not only store access data locally, but also transfer it unnoticed to external servers. As this is a considerable security risk and a data protection violation, we strongly advise against using such insecure e-mail clients. In addition, the storage of access data is a transfer of these data, which is prohibited according to the LRZ user guidelines, §4, para. 3a.

Below you will find a list of recommended clients and those that we strongly advise against. 

The list will be updated if we become aware of any further problematic clients. If you are using a client that is not listed, please check whether it is passing on your credentials.

If you have used a client that transfers your credentials: Remove your mail account from that client, uninstall it and change your password.


Safe clients

Mobile Clients

Apple MailiOS
GmailAndroid
FairEmailAndroid

k9-Mail 

Android
Nine - Email & Calendar Android, iOS


Unrecommended clients

New Outlook

Windows 

There are now two versions of Outlook: the classic version from the Microsoft Office bundle and the Windows app ‘New Outlook’. The version from the Office package can still be used without concern.

However, the new Outlook synchronises all mail accounts to the Microsoft servers. Not only are the credentials (user name and password) routed through Microsoft's servers, but also all mailbox content. This happens from the first time you try out the app.

The new version is displayed as ‘Outlook (new)’ in the Windows start menu, and a button also appears in ‘normal’ Outlook that allows you to switch to the new version. You can find more information on how to protect yourself from accidentally using the app here:

https://www.heise.de/hintergrund/Neues-Outlook-Schutz-vor-Microsofts-neugierigem-Mailprogramm-9528591.html

Further information: 

https://www.heise.de/news/Microsofts-Outlook-Datenumleitung-BfDI-will-Bericht-von-EU-Datenschuetzer-9358371.html

https://www.heise.de/news/Microsoft-krallt-sich-Zugangsdaten-Achtung-vorm-neuen-Outlook-9357691.html

Mac

The new Outlook for Mac cannot be used with an Exchange account currently. Using it via IMAP is also not recommended, as this also stores your credentials (user name and password) and all mailbox content on the Microsoft servers.

You can find out how to revert from the new version to the old version here:

https://support.microsoft.com/en-au/office/the-new-outlook-for-mac-6283be54-e74d-434e-babb-b70cefc77439#bkmk_toggle_on_off

Other unrecommended clients

NameOSEntwicklerGrund

Outlook-iOS-Android

iOS, AndroidMicrosoft Corporation

Stores mailbox content and credentials on their own servers.

https://privacy.microsoft.com/de-de/privacystatement

Cloze Relationship Management

iOS, AndroidCloze

Stores mailbox content and credentials on their own servers.

https://www.cloze.com/app/legal/privacy

Spark

 

iOS, MacOSReaddle Technologies Limited

Saves the credentials when using the ‘send later’, ‘sync between devices’ and ‘push notifications’ features.

https://sparkmailapp.com/legal/privacy-app

MyMail

iOS, AndroidMGL MY.COM (CYPRUS) LIMITED

Stores mailbox content and credentials on their own servers.

https://legal.my.com/us/mail/privacy_nonEU/

Canary

iOS, Android,
MacOS, Windows

Mailr Tech LLP

Stores mailbox content and credentials on their own servers when using push notifications and cloud functions of the app.

https://canarymail.io/privacy.html

Newton

iOS, Android,
MacOs, Windows, Linux
Cloudmagic, Inc

Saves mailbox contents of the last 60 days and credentials on their own servers.

https://newtonhq.com/k/privacypolicy

Cronofy


Cronofy

Saves the content of the calendar on their own servers. 

https://docs.cronofy.com/policies/privacy-notice/

BlueMailiOS, Android,
Windows, MacOS, Linux
Blix InciOS & Android Apps: Zugangsdaten werden auf den eigenen Servern. Speichert beim Nutzen einiger Features die Mailboxinhalte. 
https://bluemail.me/privacy/
EdisoniOS, Android,
Windows, MacOS
Edison Software Inc

Stores mailbox content and credentials on their own servers.

https://www.edisonmail.com/privacy

Xiaomi Mail / MiMailAndroidXiaomi 
TypeApp - Mail & CalendariOS, Android,
MacOS, Windows, Linux
Type App Inc

Stores the mailbox content on their own servers for a certain period of time when using the Instant Push Services features and some additional features on iOS. 

https://typeapp.com/privacy/

QQ Mail
Tencent Technology (Shenzhen) Company Ltd.

 

AirmailMacOS, iOSBloop S.R.L

Saves mailbox content and credentials when using the Realtime Mailbox Monitoring, Synced Snooze or Send Later features.

https://airmailapp.com/privacyios.html

CalendlyiOS, AndroidCalendly

Saves the free/busy times and, when using some features, the entire calendar content.

https://calendly.com/legal/privacy-notice

CalendarsiOS, MacOSReaddle Technologies Limited

Stores mailbox content and credentials on their own servers.

https://readdle.com/calendars/legal/privacy#datareceivedfromthirdparties