Android apps for children were actually stealing user data

Image Credit: Pixabay

Google has removed a number of popular Android apps from its Play Store after they were found to violate its own data collection rules. The International Digital Accountability Council (IDAC) informed Google that Princess SalonNumber Coloring and Cats & Cosplay, which collectively have over 20 million downloads, were breaching company policy, leading to their removal.

“The practices we observed in our research raised serious concerns about data practices within these apps,” IDAC’s president Quentin Palfrey said. “We applaud Google for taking steps to enforce on these apps and the third-party data practices within these apps.”

As Palfrey suggests, it is not the app’s code itself that violated Play Store rules, but the third-party frameworks that they are built upon. The apps used versions of the Unity, Appodeal and Umeng SDKs, all of which collected Android ID and Android Advertising ID data. In doing so, it was possible for them to violate Google’s privacy protection regulations.

Privacy breach

It doesn’t seem like these violations were intentional and it’s not possible to tell how much, if any, user data was taken by the three apps in question. However, because these apps were aimed at children, any potential breach, particularly one like this that could be used to track users, should be taken very seriously,

At least two of the developers of the removed apps, Creative APPS and Libii Tech, still have apps available via the Play Store and versions of the removed apps can still be downloaded from APK sites. Versions of the apps published via the App Store did not appear to contain the same privacy violations as those available on Android devices.

There are nearly three million apps available from the Play Store, with thousands more added every day. For Google, ensuring that its privacy protocols are adhered to by each one represents a huge undertaking.

Recently, security firm Avast uncovered 21 adware apps on the Google Play Store, many of them disguised as games and gaming platforms, which could cause major damage to user devices.

The malicious apps (the full list of which can be found here), were found to bombard users with intrusive ads, and possibly run up huge phone bills, have been downloaded nearly eight million times in total.

Via Engadget

TOPICS
Barclay Ballard

Barclay has been writing about technology for a decade, starting out as a freelancer with ITProPortal covering everything from London’s start-up scene to comparisons of the best cloud storage services.  After that, he spent some time as the managing editor of an online outlet focusing on cloud computing, furthering his interest in virtualization, Big Data, and the Internet of Things. 

Latest in Security
An American flag flying outside the US Capitol building against a blue sky
The FCC is creating a security council to bolster US defenses against cyberattacks
Image depicting hands typing on a keyboard, with phishing hooks holding files, passwords and credit cards.
Microsoft warns about a new phishing campaign impersonating Booking.com
Ransomware
Microsoft uncovers sleuthy new XCSSET MacOS malware campaign
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Meta warns of worrying security flaw hitting open source type software
Hand holding smartphone and scan fingerprint biometric identity for unlock her mobile phone
Biometrics add another layer of security to passwordless authentication
Data leak
Hacked Tata Technologies data leaked by ransomware gang
Latest in News
Google Gemini Flash 2.0 Images
I tried Gemini's new AI image generation tool - here are 5 ways to get the best art from Google's Flash 2.0
An image of the Samsung Galaxy S25 Ultra from a hands-on event
Samsung Galaxy S26 Ultra could resurrect an intriguing camera feature
Eurocom Raptor X18
At $15,000, this massive 256GB RAM laptop makes Apple's MacBook Pro look affordable, tiny and very, very slow
Cristin Milioti in Black Mirror season 7
Netflix launches trailer for Black Mirror season 7, giving us a look at its first-ever sequel episode and an unexpected returning character
A graphic of the PC Gaming Show
Get ready for a bounty of PC games on June 8, as the PC Gaming show is back
A close up of The Daily podcast from Pocket Casts' web page
‘Podcasting shouldn’t be locked behind walled gardens’: Pocket Casts slams Spotify and makes its web player free to all