Mozilla says Play Store privacy labels for popular Android apps are misleading

In response to Apple’s strict privacy rules, Google added privacy nutrition labels to the Play Store last April. These labels allow developers to disclose and explain the variety of data their apps collect from users, helping consumers understand what they are signing up for. Mozilla found that top Play Store apps’ disclosure labels don’t match all user data.

Mozilla’s latest “Privacy not included” report stated Thursday that popular apps like TikTok and Twitter share user data with advertisers, internet service providers, and platforms, despite their data labels stating otherwise.

Developers declare nutrition labels using a Google Data Safety Form. Mozilla’s report found that companies are exploiting self-disclosures to misrepresent data labels.

The organization said Google exempts app makers from declaring data sharing with “service providers,” a narrow definition in the search giant’s terms. The Firefox-parent company also accused Google of relying on developers to make accurate claims. Google examined these labels “using systems and processes that are continuously improving” at launch.

This report examined Mozilla’s top 20 free and paid apps. It rated “poor,” “needs improvement,” and “OK.”

The report gave Twitter, Minecraft, and Facebook “poor” grades. TikTok, YouTube, Google Maps, and Gmail were among the 15 “needs improvement” apps. UC Browser, League of Stickman Acti, and Terraria amusingly did not fill out the Google Data Safety Form. Google said developers must fill out the form to update their apps.

Consumers value privacy and want to download apps wisely. Google’s Data Safety labels should help. Sadly, no. “I’m worried they do more harm than good,” Mozilla Project Lead Jen Caltrider said.

“Data Safety labels that say apps like Twitter or TikTok don’t share data with third parties make me angry because they’re wrong. Twitter and TikTok do share data with third parties. Consumers deserve better. Google must improve.”

The issue extends beyond Google Play. Multiple reports have found that Apple App Store developers misrepresent data sharing. These reports are the latest issue for Apple and Google, whose app store policies are under scrutiny.

Google and Apple were accused of app store monopoly by the Biden administration earlier this month. The Commerce Department’s National Telecommunications and Information Administration (NTIA) reported that these app stores “unnecessarily barriers and costs for app developers” stifle their growth.

Caltirider advised Apple and Google to standardize data privacy across platforms to educate customers. Mozilla also urged tech giants to punish apps that don’t disclose data sharing.

Google said Mozilla’s grades were random and not useful for app safety.

“This report confuses company-wide privacy policies that cover multiple products and services with individual Data safety labels, which inform users about the data a specific app collects. Google spokesperson said, “The arbitrary grades Mozilla Foundation assigned to apps are not a helpful measure of the safety or accuracy of labels given the flawed methodology and lack of substantiating information.”

Safety labels are new and offer more transparency, according to the company. If developers lie, these labels could harm more.