Google Play has added a new security module to make the application of data more transparent

Author/ Suzanne Frey, VP, Product, Android Security and Privacy

With our close cooperation with developers, Google Play has become a safe and trustworthy space, providing billions of users with the latest Android application experience. Now, we will introduce a security module in Google Play to help users understand the data collected or shared by the application, whether the data is protected, and other details that affect privacy and security.

Developers recognize that users deserve transparency and control over their data. At the same time, developers also need to communicate with users about application security in a concise and understandable way, so that users can have sufficient information to decide how their data should be used. We also learned from developers that they want to provide users with additional background information to introduce the use of data and the impact of security practices on the application experience. Therefore, in addition to presenting the data collected or shared by the application, we will also emphasize the following:

• Does the application use security practices, such as data encryption
• Does the app comply with our family policy
• Does the application need this data to run, or can the user choose whether to share this data
• Whether the security module of the application has been verified by an independent third party
• If the user decides to uninstall the app, will the app provide the user with a way to delete their data
• Develop apps and games suitable for children and families

This will be a major change, so we will share this progress with developers in advance and build the module with you.

security module will cover

We will ask developers to provide:

• Types of data collected and stored: such as approximate or precise location, contact information, personal information (name, email address, etc.), photos and videos, audio files, and stored files
• The purpose of the data: For example, to realize application functions and personalization

Similar to application details such as screenshots and instructions, developers are responsible for the information disclosed in their security modules. Google Play will introduce a policy that requires developers to provide accurate information. If we find that the information provided by the developer is incorrect and violates the policy, we will ask the developer to fix it. Apps that do not meet compliance requirements will be subject to policy violations.

Future plans

All apps on Google Play (including apps published by Google itself) must share this information and provide a privacy policy.

We are committed to ensuring that developers have sufficient preparation time. This summer, we will share new policy requirements and resources, including detailed guidance on applying privacy policies. Starting in the second quarter of 2022, when submitting new apps and app updates, such information must be provided in order to be approved.

△ Target timetable (dates may be adjusted according to specific circumstances)

We will continue to provide users with new ways to simplify this control, and provide more automation support for developers' work.

Reference Resources

In the meantime, please refer to the following resources to help you design safe and privacy-friendly applications:

• Review the data you collect, send to the server, or share with third parties

  • Learn how audits and interprets the data access status of SDK and development library

• Learn how to build privacy-friendly apps:

  • Privacy protection best practices
  • Application Success Academy: Design to achieve privacy and security

• Learn how to build more secure applications:

  • Security best practices
  • Process data more safely

We look forward to working with developers to go further and make Google Play a platform that everyone can trust.