- These high school theater kids put on a totally awesome ‘Alien’ play Saturday 3:59 PM
- Behold these photos of Elon Musk, but with Elizabeth Holmes’ eyes Saturday 3:11 PM
- Barbra Streisand gets canceled over remarks about Michael Jackson’s alleged victims Saturday 2:09 PM
- Report: Florida man raped Texas teen after posing as Instagram celeb Saturday 12:14 PM
- Lori Loughlin’s daughters, Olivia and Isabella, could be banned from USC forever Saturday 11:46 AM
- ‘Starfish’ is a heartbreaking tale of BFFs, grief, and apocalyptic alien invasions Saturday 10:35 AM
- How to stream UFC Fight Night 148 for free Saturday 10:00 AM
- The kids are making scantron memes instead of studying Saturday 9:29 AM
- Every installment of Hulu’s ‘Into the Dark,’ ranked Saturday 6:00 AM
- The internet is mocking Robert Mueller’s report deadline Friday 7:53 PM
- Instagram blocks some anti-vax hashtags—but still has far to go Friday 6:20 PM
- Study: Netflix released more originals than licensed titles last year Friday 2:26 PM
- Laura Ingraham, Dinesh D’Souza slam journalist for having a job Friday 1:40 PM
- Netflix is testing a cheap-as-hell mobile-only plan Friday 1:08 PM
- Astrology app Co-Star’s bizarre push notifications are now a meme Friday 12:18 PM
Rob Bulmahn/Flickr (CC-BY)
Researchers using an automated testing process have discovered that 3,337 family- and child-oriented Android apps on Google Play were possibly collecting kids’ data in an improper manner, potentially putting them in violation of the U.S.’ Children’s Online Privacy Protection Act (COPPA), according to a study recently published.
COPPA regulates how mobile apps, games, and websites are allowed to collect and process personal information from children under the age of 13, in an effort to protect minors from giving away their personal data before they fully understand the implications of it. The study shows, however, that actually enforcing the law can be tricky.
“Based on our automated analysis of 5,855 of the most popular free children’s apps, we found that a majority are potentially in violation of COPPA, mainly due to their use of third-party SDKs (software development kits),” the study said. “While many of these SDKs offer configuration options to respect COPPA by disabling tracking and behavioral advertising, our data suggest that a majority of apps either do not make use of these options or incorrectly propagate them across mediation SDKs.”
This study could monitor when data is first accessed and where it is sent, according to the published report. To conduct the study, researchers modified Android’s permission system to enable the real-time monitoring of apps’ access to protected resources (like location data, address book contacts, etc.) and instrumented all the functions in the Android platform that access these sensitive resources. The framework also included a modified version of Lumen, a network monitoring tool that captures all network traffic generated by the app being tested.
The study shows that of the 5,855 total apps included in the study, 281 of them collected contact or location data without asking for a parent’s permission. Additionally, 1,100 apps shared persistent identifying info with third parties for restricted purposes, while 2,281 of them seemed to violate Google terms of service forbidding apps from sharing those identifiers to the same destination as the Android Advertising ID. About 40 percent of apps transmitted info without using “reasonable security measures,” and 92 percent of the 1,280 apps with Facebook tie-ins weren’t properly using the social network’s code flags to limit under-13 use.
These findings show how protecting children online isn’t as simple as doing an age check or asking for parents’ permission—both can be overridden by a thrifty child— and that Google, third-party apps, and officials have a long way to go in effectively enforcing COPPA.
Tess Cagle is a reporter who focuses on politics, lifestyle, and streaming entertainment. Her work has appeared in the New York Times, Texas Monthly, the Austin American-Statesman, Damn Joan, and Community Impact Newspaper. She’s also a portrait, events, and live music photographer in Central Texas.