Product pattern

Trust signals

Cues that answer a user's unspoken worry (spam, surprise charges, security, accuracy) at the moment the worry arises.

Trust signals The same sign-up form twice. In the first, the email field, the card field and the trial button leave three worries unanswered and the terms sit in a grey footer. In the second, a short promise sits right under each one: no spam, card is encrypted, price and how to cancel. Worries left hanging Email Card number Start free trial Terms apply. See the privacy policy. 1 2 3 1 Will you spam me? 2 Is my card safe? 3 What will I be charged? Answered on the spot Email Card number Start free trial One email a week. No spam. 1 Encrypted. We never store it. 2 7 days free, then $59.99 a year. Cancel anytime in Settings. 3
The same sign-up form twice: one leaves worries about spam, card safety and charges unanswered, the other answers each one right next to the field or button that raises it.

Before users hand over an email, a permission or a card, they ask whether the product is safe and honest. Trust signals answer that question on the screen: a promise about notification frequency, privacy-friendly defaults, opt-in overage billing, "Secured with App Store" under a buy button. On this site the label also covers objection handling and reassurance, and its failures: dense legal footers and small grey terms that raise doubt instead of settling it.

B.J. Fogg's Stanford survey of about 1,400 people (2001) found that sites gained credibility from showing a real organization behind them, ease of use and expertise, and lost it through amateur errors and aggressive commercial elements. Baymard Institute's checkout research finds that perceived security varies within a single page: concern rises at the card fields, and 19% of US shoppers in a 2025 survey had abandoned a checkout because they didn't trust the site with their card. NN/g lists up-front disclosure of costs and policies as one of four core credibility factors.

Trust is decided at specific moments: the permission prompt, the email field, the price block, the purchase button. A signal works best right next to the action that triggers the worry.

How to use it

  • Place reassurance next to the risky action: a privacy note under the email field, a cancellation promise next to the trial button, a payment badge by the card fields.
  • Make costly options opt-in (overage billing, usage tracking) and say so plainly.
  • State renewal date, price and how to cancel in readable text near the button, not in the footer.

Watch out

  • Fake or decorative badges, invented user counts and unverifiable claims destroy trust once noticed.
  • Reassurance that contradicts the fine print ("cancel anytime" above a non-refundable charge) is worse than no reassurance.

Related

Trust signals in real products 19 working · 5 not

Dazzle AI: Hide My Email offered Dazzle AI (working) Hide My Email offered The field is typed as email, so iOS suggests a relay address, which lowers the trust barrier. Dazzle AI: Relevance promise Dazzle AI (working) Relevance promise "Only send notifications when timely and relevant" answers the spam worry up front. Printer app: Secured with App Store Printer app (working) Secured with App Store A shield and Apple's name borrow trust right under the button. Math Zen: Tracking off by default Math Zen (working) Tracking off by default Anonymous usage data is opt-in, which builds trust right before the paywall. Cursor: Overage is opt-in Cursor (working) Overage is opt-in "On-Demand Usage is Off" by default, so nobody is billed past the plan by surprise. OpenAI API: Pricing one click away OpenAI API (working) Pricing one click away "Model pricing" link sits next to the amount so you can sanity-check what $10 buys. OpenAI API: Auto-recharge is opt-in OpenAI API (working) Auto-recharge is opt-in The checkbox is unchecked by default and says exactly when the card is charged. Neon: Warning label Neon (working) Warning label A small amber "Warning" tag sets the tone without shouting. Supabase: Honest about need Supabase (working) Honest about need "If you are connecting via the Shared connection pooler, you do not need this add-on" talks some users out of buying. Supabase: Spend cap explained Supabase (working) Spend cap explained "You won't be charged any extra for usage" plus what happens instead removes fear of a surprise bill. Count: Least-privilege token Count (working) Least-privilege token "Read-only and Metadata only permissions" tells security-minded users exactly what to create. Canva: Remind me later Canva (working) Remind me later A soft exit with "We'll remind you 7 days before your trial ends" handles the fear of being charged. Canva: Cancel stays clear Canva (working) Cancel stays clear "Continue cancellation" is easy to find, so the flow does not feel like a trap. Google Cloud: Help for the unsure Google Cloud (working) Help for the unsure FAQ, Documentation, Forums and Billing links answer questions without a sales call. Fivetran: Security for buyers Fivetran (working) Security for buyers "Keep your data secure" links SAML and access control for the person who has to approve the purchase. MotherDuck: Trial context in the header MotherDuck (working) Trial context in the header "You have 30 days left" plus a "Talk to us" link for teams that can't decide. Holistics: Answers the security question Holistics (working) Answers the security question "Does Holistics store my data?" plus SOC2 and GDPR badges, right next to the choice. Holistics: Data security repeated Holistics (working) Data security repeated "Holistics doesn't store your data" again, at the moment you type a password. Peaka: Security note under the button Peaka (working) Security note under the button "Your credentials are stored on Hubspot side" answers the obvious worry. Hex: Dense legal footer Hex (not working) Dense legal footer "Compute prices are subject to change" and card-charge terms in small grey text. Bricks: Numbers worth a second look Bricks (not working) Numbers worth a second look Unique Users and New Signups are both 2805, and AI Usage Events is 2803. Databricks: about:blank in the URL bar Databricks (not working) about:blank in the URL bar The page has no address while it loads, which looks odd on a flow that just shared credentials. Julius: "Yolo it" in a stats tool Julius (not working) "Yolo it" in a stats tool The visible prompt says "Yolo it and follow up if any issues", which undercuts trust in the result. Peaka: Wrong subtitle Peaka (not working) Wrong subtitle "Enter your Secret Key to create internal tools on top your payment data" is copy from another connector.