A new study has has shown that the privacy policies of a large number of Android apps on the Google Play Store contain contradictions when it comes to how they collect user data.
In an effort to better understand the language used in the privacy policies of popular apps, researchers created a tool called PrivacyLint which they used to analyze the privacy policies of 11,430 Play Store apps. They found that just over 14 percent (1,618 apps) of apps have privacy policies with logical contradicting statements about data collection.
For example, some of the privacy policies stated in one section that they do not collect personal data, though in subsequent sections they went on to contradict themselves by stating that they collect emails or customer names, both of which are personally-identifiable information.
- Android apps are apparently now more secure than ever
- Google brings in new privacy policies to make Chrome extensions better
- Canonical now lets you host Android apps in the cloud
Auto-generated privacy policies
The research team was unable to determine why app makers used contradictory statements in their privacy polices but some of them believe the end goal is to mislead any users that actually take the time to read the policies.
However, the reason behind these contradictory statements in regard to data collection is actually a lot simpler in some cases. The research team found 59 apps used online services to auto-generate a privacy policy. Upon further investigation, they discovered that the self-contradicting statements used in these privacy policies were actually part of a template used by the online services utilized by app makers.
Unfortunately though, the vast majority of other privacy policies were unique to each app and were not created using online services. In these cases, the app makers are susceptible to fines from privacy watchdogs in the EU and US, according to the research team.
In order to verify the accuracy of the PolicyLint tool, the researchers took a sample of 510 privacy policies with contradictory statements and then verified them manually. Of these 510 apps, the team found contact emails for 260 developers and emailed them about their findings. However, only 11 responded back and just three developers corrected their privacy policies to remove the contradictions.
- Also check out the best antivirus software
Via ZDNet
