FTC criticizes poor privacy disclosures in apps for kids, says industry must improve standards

Let’s take a quick break from the hordes of Mountain Lion OSX news to talk about privacy issues within apps…again. However, this time the spotlight is on children’s apps in both Apple’s App Store and Google’s Android Marketplace.

The Federal Trade Commission released a report today (PDF) based on a survey that found apps for children do not fully disclose the types of data collected nor do they adequately educate parents about data harvesting.

The consumer protection agency scrutinized privacy policies, recommended each developer give comprehensible disclosures on how data is accrued and shared, including whether children’s data is linked to social network apps, and it even mentioned conducting a six-month review on disclosures and using enforcement if needed. The report focused on the two main app stores themselves and requested more be done to tell children and their parents about privacy concerns…

Read more

W3 Innovations pays the FTC $50,000 for collecting children’s info in iOS apps

The FTC filed a lawsuit against W3 Innovations Friday, the parent company of Broken Thumbs Apps, for collecting the personal information of children in their apps. Broken Thumbs Apps have been downloaded more than 50,000 times in the iTunes App Store, and titles include  Zombie Duck HuntTruth or Dare, and Emily’s Dress Up. Monday, the company settled with the FTC for $50,000.

The FTC’s complaint includes W3 storing more than 30,000 children’s (probably parent’s) emails and personal information on their servers. In one game, the company asked for the child’s name. In the game Emily’s Girl World, it gave children the opportunities to make comments on a related blog, which were stored on a server.

The FTC says since these apps were directly marketed to children and transmitted information over the internet, the apps are in violation of the Children’s Online privacy Protection Pact (COPPA), and the FTC’s COPPA rules. Besides settling, the company agreed to delete all of the children’s personal information off of their servers. (via Ars Technica)