April 16, 2012: Only 2% of smartphone mobile apps intended for children disclose what personal information is being collected and who is receiving that information, writes the Federal Trade Commission (FTC) in a report, "Mobile Apps for Kids," and reported on by Eleanor Yang Su of California Watch.
Mobile apps can capture a broad range of user information from the device automatically – including the user’s precise geolocation, phone number, list of contacts, call logs, and unique device identifiers.
Co-authors of the FTC report, Patricia Poss and Andrew Hasty of the Bureau of Consumer Protection, reviewed the promotional pages for 400 mobile apps aimed at children, including alphabet and word games, math and number games, memory games, stories, flash cards, and puzzles.
The problem they found was the broad range of services that data could be collected for; some apps may require it for the service, for eg., mobile gaming apps that allow a child to identify and connect with others playing the same game nearby, while others may not need to collect data to provide the service but still do so without the user’s knowledge.
Parents generally cannot determine, before downloading an app, whether the app poses risks
related to the collection, use, and sharing of their children’s personal information. Parents need clear, easy-to-read, and consistent disclosures regarding the advertising that their children may view on apps, especially when that advertising is personalized based on the child’s in-app activities.
The report also identified issues of disclosure with features such as linking to social networking sites, which it found to be "highly relevant" to parents selecting apps for their children, and that such functionality should be disclosed prior to download.
From California Watch:
Some apps collect and use children’s data for a positive purpose, said Alan Simpson, vice president of policy at Common Sense Media...point[ing] to an app that teaches algebra, tracking responses to earlier problems to best tailor instruction in a challenging way.
“What makes a lot of parents uncomfortable,” he said, “is when they are not informed about the collection and use of data.”
The report did not delve into what information apps actually are collecting from children, but the FTC is looking into that and plans to release its findings within the next four months.
According to the Children's Online Privacy Protection Act of 1998, a notice of information practices must be linked clearly and prominently (for eg., a larger font size or a different color type on a contrasting background) on the home page of the online service and at each area where it collects personal information from children. A link in small print or a link that is indistinguishable from other links on your site is not considered clear and prominent.
A notice of information practices must include: the name and contact information of all operators collecting or maintaining children's personal information through online service; the kinds of personal information collected from children (for example, name, address, email address, hobbies, etc.) and how the information is collected -- directly from the child or passively through cookies; and how the operator uses the personal information, for eg., marketing, notifying contest winners, allowing the child to make the information publicly available through a chat room.
Written for California's Children by Elizabeth J Carlyle.
Recent Comments