Google is launching a new data safety section in the Play Store, Data Safety, where developers must declare what data their software collects from users of their Android apps.
This will resemble a privacy label that will allow users to very quickly see important information that will be enough to help them decide whether they would like to proceed with installing an app or not.
See also: Google Play Store: It will prevent you from downloading old apps
Developers are therefore required to declare what data they collect, as well as what data they share with third parties. In this way, the purpose behind the collection of information is essentially revealed.
If the user wants to learn more about a specific entry, clicking on the corresponding item will display a menu with more information about what is being collected or shared.
The third pillar of the new Play Store section, Data Safety, relates to practices security each app's which essentially describe the security mechanisms used to protect the data, such as the MASVS standard. This point also clarifies whether users have the ability to request the deletion of their data at any time.
Finally, the Data Safety section will determine whether the app follows the Google Play Families Policy, which aims to protect children.
Google said it will roll out this new privacy of the Play Store gradually. Most users will be able to see it within the next two weeks.
Android app developers who have their apps on the Play Store can immediately begin disclosing how the data they collect is used. The deadline for completing their submissions is July 20, 2022.
Google told BleepingComputer that developers will provide this information on their own, without the company’s confirmation. However, if a developer is found to have misrepresented their data usage disclosures, they will be required to correct the information provided. Otherwise, the app will be removed from the Google Play Store.
See also: Coca-Cola investigates allegations of hacking and data theft
For more information about the new system and how it works, please refer to Google's support page
How have things been working so far?
Until now, Android apps on the Play Store had to list a link to their Privacy Policy in the “Additional Information” section and provide a contact email.
However, since this privacy policy is hosted on an external site, it is subject to changes and may not disclose all the critical details regarding data. Another negative aspect of the previous method is that the information was usually included in long texts with legal jargon, which almost no one checks because it is tedious.
Due to the practical difficulties arising from the above, it was impossible for Google to validate that applications respected the terms presented in their privacy policies.
The new Data Safety section in the Play Store gives users a clear picture of what is happening with their data, without requiring them to spend time searching through different links, etc.
Given that there are many fake and malicious apps trying to infiltrate the Play Store, the new privacy enhancement section will not only be useful for Android, but will also allow Google to find violators of its policies more quickly.
See also: Emotet malware “strikes again” after bug fix that prevented infection
Unfortunately, many malicious apps manage to sneak onto the Play Store from time to time. These apps can be disguised as games, photo editing apps, etc. Last month, a trojan called FaceStealer was found on the Play Store and aimed to steal Facebook credentials. The trojan appeared as a legitimate app called Craftsart Cartoon Photo Tools, which allowed users to upload an image and turn it into a cartoon.
Source: Bleeping Computer
