Security
How we protect you
Every RoamRig rental is a real phone of your own. Here is exactly how we keep that phone, your account and your payments safe, in plain words.
1 phone
a real device assigned to you
HTTPS
always-encrypted connection
0
ad trackers on roamrig.io
October 2026
last full security review
Your account
Getting into your account takes your email or username and a password that hasn't appeared in known data breaches.
Verified email
New accounts confirm their email address before they can sign in.
Leaked passwords refused
Passwords that have appeared in known data breaches can't be used on RoamRig.
No account fishing
A wrong email and a wrong password get the same reply, so outsiders can't check who has an account.
Sign-in attempt limits
Repeated sign-in attempts are blocked for a few minutes.
Staff access by role
Only accounts marked as RoamRig staff can open admin tools, checked on our servers every time.
Your data
Your information is kept private and out of advertisers' hands.
Tamper-proof account settings
Your plan, payment status and assigned phones can only be changed by RoamRig, not from a browser.
Private file storage
Files you upload for Automations are stored privately, and preview links expire after 5 minutes.
No ad trackers
We don't run advertising pixels or third-party analytics scripts on roamrig.io.
We don't sell your data
We never sell your personal information.
Payments
Paying is handled by a dedicated payment provider, and only real payments activate a plan.
Card details never touch us
You pay on Whop's secure checkout. RoamRig never sees or stores your card number.
Prices set on our servers
The amount you pay is calculated by our servers, so it can't be changed in the browser.
Verified payment confirmations
A plan turns on only when the payment provider's signed confirmation arrives, and each payment counts once.
Your phone and connection
A real phone of your own, reached over an encrypted connection.
A real phone, just for you
Each rental is a physical Android phone assigned to your account, not a shared emulator. Only one customer holds it at a time.
Encrypted everywhere
roamrig.io only loads over HTTPS, and browsers are told never to connect without encryption.
Encrypted phone screen
Your phone's screen and everything you type travel over an encrypted connection.
Fake-link protection
The phone player only connects to RoamRig's own servers, so a forged link can't pose as your phone.
No hidden embedding
Other websites can't secretly embed RoamRig pages to trick your clicks.
Safe links
Links after sign-in only ever take you to RoamRig pages.
Live sessions aren't recorded
We don't record your live sessions. Authorized RoamRig support staff can view a phone's screen when needed for support and maintenance, and we log which account connected to which phone and when.
Automations
When an AI agent works on your phone, it works only on the tasks you set.
Reads only to act
When you use Automations, our AI reads your phone's screen only to carry out the tasks you set.
You approve messages
By default, Automations drafts messages and waits for your approval before sending them.
How we work
Security is checked, tested and kept up to date, not set once and forgotten.
Full security review
Our whole platform was reviewed for security on October 29, 2026, and every finding is being fixed in order of risk.
Covered by automated tests
Our protections are covered by hundreds of automated tests.
Up-to-date software
We patch known vulnerabilities in the software roamrig.io is built on.
Rolling out now
Built and being switched on step by step, so no one's phone is interrupted. We'll move each one up when it's live.
- Walled off from other customers · in progress. Database rules let each account read only its own records, never another customer's.
- Old messages cleared · in progress. Stored support messages are deleted automatically after a set period.
- Private phone access · in progress. Each phone screen opens only with a short-lived pass tied to your account, so old or copied links stop working.
- Your automations stay on your phones · in progress. Automation commands are checked on our servers and run only on phones you rent.
- A separate key for every server · in progress. Each of our phone servers has its own credentials, limited to its own phones.
- Signed server updates · in progress. Our phone servers only install updates that carry our digital signature.
Our commitments and your part
What we will never do
- See or store your card number.
- Show you ads or put ad trackers on our site.
- Ask for your password by email, chat or phone.
- Sell your personal information.
How you can help
- Use a password you don't use anywhere else.
- Don't share your phone's link. Give teammates their own access instead.
- Sign out when you use a shared computer.
- Tell us right away if anything looks wrong.
Report a security concern
Found something that doesn't look right? Email help@roamrig.io or use our contact page. We read every report.
Contact usLast reviewed October 29, 2026.