14% of Android application privacy policies and data collection contradictory behavior

In an academic study published last year, researchers created a tool called PolicyLint of, for copywriting 11430 Play Store app privacy policy used for analysis. They found that 14.2% of the Android application privacy policies and data collection contradictory behavior.

For example, in a section in the privacy policy stated that they do not collect personal data, and in the subsequent text declaration which they collect e-mail or user name, which is clearly identifiable personal information. Although the research team was unable to determine the intent of the application developers using contradictory statements in its privacy policy, but the researchers believe that the main purpose of this practice is misleading.

However, they also found evidence to the contrary. For example, the research team found 59 APP use the online service to automatically generate privacy policy. After more in-depth study of these online services we found that these contradictory statements are part of the template itself, rather than the contents of the application developers to add.

However, most other privacy policy is unique for each application. The team said that in these cases, the application developer may be subject to a fine of privacy EU and US regulators. Contradictory statements may result in the EU and FTC DPA (Data Protection Authority) for developers to force fine.

The research team also found that, in their analysis of 68,051 applications, there are 10.5% of third-party applications and services share personal data, but they do not have their privacy policies. In addition, the 68,051 applications, only 22.2% of applications in the privacy policy expressly designated third-party partners or affiliates, the vast majority of applications are hidden end-user data to obtain third-party partners or affiliates .

Manuscripts: cnBeta

Guess you like

Origin www.oschina.net/news/112973/android-app-collect-personal-information