The Federal Trade Commission (www.ftc.gov) has issued a new staff report, “Mobile Apps for Kids: Disclosures Still Not Making the Grade,” examining the privacy disclosures and practices of apps offered for children in the Google Play and Apple App stores. The report details the results of the FTC’s second survey of kids’ mobile apps.
Since FTC staff’s first survey of kids’ mobile apps in 2011, it says its staff found little progress toward giving parents the information they need to determine what data is being collected from their children, how it is being shared, or who will have access to it. The report also finds that many of the apps surveyed included interactive features, such as connecting to social media, and sent information from the mobile device to ad networks, analytics companies, or other third parties, without disclosing these practices to parents.
“While we think most companies have the best intentions when it comes to protecting kids’ privacy, we haven’t seen any progress when it comes to making sure parents have the information they need to make informed choices about apps for their kids. In fact, our study shows that kids’ apps siphon an alarming amount of information from mobile devices without disclosing this fact to parents,” says FTC Chairman Jon Leibowitz. “All of the companies in the mobile app space, especially the gatekeepers of the app stores, need to do a better job. We’ll do another survey in the future and we will expect to see improvement.”
FTC staff examined hundreds of apps for children and looked at disclosures and links on each app’s promotion page in the app store, on the app developer’s website, and within the app. According to the report: “Most apps failed to provide any information about the data collected through the app, let alone the type of data collected, the purpose of the collection, and who would obtain access to the data. Even more troubling, the results showed that many of the apps shared certain information with third parties — such as device ID, geolocation, or phone number — without disclosing that fact to parents. Further, a number of apps contained interactive features – such as advertising, the ability to make in-app purchases, and links to social media — without disclosing these features to parents prior to download.”
The survey found that:
° Parents are not being provided with information about what data an app collects, who will have access to that data, and how it will be used. Only 20% of the apps staff reviewed disclosed any information about the app’s privacy practices.
° Many apps (nearly 60% of the apps surveyed) are transmitting information from a user’s device back to the app developer or, more commonly, to an advertising network, analytics company, or other third party.
° A relatively small number of third parties received information from a large number of apps. This means the third parties that receive information from multiple apps could potentially develop detailed profiles of the children based on their behavior in different apps.
° Many apps contain interactive features — such as advertising, links to social media, or the ability to purchase goods within an app — without disclosing those features to parents prior to download.
° Fifty-eight percent of the apps reviewed contained advertising within the app, while only 15% disclosed the presence of advertising prior to download.
° Twenty-two percent of the apps contained links to social networking services, while only nine percent disclosed that fact.
° Seventeen percent of the apps reviewed allow kids to make purchases for virtual goods within the app, with prices ranging from US$0.99 cents to $29.99. Although both stores provided certain indicators when an app contained in-app purchasing capabilities, these indicators were not always prominent and, even if noticed, could be difficult for many parents to understand.
The report strongly urges all entities in the mobile app industry — including app stores, app developers, and third parties providing services within the apps — to accelerate efforts to ensure that parents have the key information they need to make decisions about the apps they download for their children. The report also urges industry to implement recommendations in the recent FTC Privacy Report including:
° Incorporating privacy protections into the design of mobile products and services;
° Offering parents easy-to-understand choices about the data collection and sharing through kids’ apps; and
° Providing greater transparency about how data is collected, used, and shared through kids’ apps.
In addition, FTC staff is developing new consumer education directed to parents to help navigate the mobile app marketplace and avoid apps that fail to provide adequate disclosures.