Prepare for the new security section of Google Play

/ Suzanne Frey, VP, Product, Android Security and Privacy

Here, we will introduce to you forthcoming in Google Play safe part further details. Google knows that the sense of security when you are on the Internet comes from products that provide security by default, protect privacy from the design source, and allow users to control how their data is used. This upcoming security section will provide developers with a simple way to demonstrate the overall security of the application, allowing users to have a deeper understanding of the application’s privacy and security practices, as well as explaining the data that the application may collect and the reasons for doing so. -All of this happens before the user installs the application.

All apps in the Google Play store will be required to share relevant information in the security section. We hope to give developers enough time to deal with these changes, so we are here to share with you more information about data type definitions, security part design, and new feature policy requirements. Click here watch the video introducing the security part that will be launched in Google Play for more details.

The appearance of the new security part (tentative)

△ Schematic diagram, specific to the actual published content

Users will see the new summary content on the app’s store details page, which contains the developer’s explanation of what data the app collects or shares, and highlights the security details, such as:

• Whether the application has taken security measures, such as data encryption
• Does the app follow our family policy
• Whether the application has been carried out in accordance with global safety standards independent verification

△ Schematic diagram, specific to the actual published content

Users can click on the summary to view the following details:

• What type of data is collected and shared by the application, such as location, contacts, personal information (such as name, email address), financial information, etc.
• How the data is used, such as for application functions, personalization, etc.
• Is data collection an optional or mandatory prerequisite for using the app

△ Schematic diagram, specific to the actual published content

In the process of designing various data identifications, we learned that developers are more inclined to share their background information on data processing, and to share detailed instructions on whether their applications are automatically collecting data, and whether the collection can be turned off . We also know from users that they care about whether their data is shared with other companies and the reasons for doing so.

The details introduced above are still only directional. As we continue to work with developers and consider the experience of developers and users as a whole for in-depth consideration and design, these details may change.

Policy changes in the security part

We have released a new user data policy that aims to provide users with more transparency and help them make informed judgments about how apps collect, protect, and use their data.

• All developers must provide a privacy policy . Previously, only applications that collected personal and sensitive user data needed to share the privacy policy .
• The developer is responsible for providing accurate and complete information in the security section, including data used by the third-party development library or SDK of the application.

This applies to all apps published on Google Play, including Google’s own apps.

What can everyone expect

We hope to provide developers with sufficient time and resources to prepare.

△ Target timetable, please refer to the actual official release date

Starting in October, developers can submit information for review in the Google Play Management Center. We encourage everyone to start as early as possible to prevent problems during the submission and review process. The new security section will be released on Google Play in the first quarter of 2022.

We know that some developers need more time to evaluate their applications and coordinate work with multiple teams. Therefore, the deadline for content approval for the security part of your application is April 2022. If the security part of the newly submitted app or app update is not approved, it may be rejected for listing.

△ Schematic diagram, specific to the actual published content

If your application information is still not approved when Google Play launches the security section to users in the first quarter of 2022, the security section will show "No such information provided."

How to prepare

• Visit the help center in the Play Control Center to learn more about providing application privacy details in the Play Control Center, including a list of data types and examples.
• reviews your application collects, protects and shares data. In particular, check the permissions declared by the application and the APIs and libraries used by the application. Depending on the review, you may need to indicate the specific types of data that the app collects and shares.

In the coming months, we will continue to share more details, including operational guidance and specific timetables.

Thank you everyone for continuing to work with us to build this new feature and make Google Play a safer and trustworthy platform for everyone. Please watch the PolicyBytes video to learn more about the Google Play policy update in this issue.

https://www.bilibili.com/video/BV1cL411n7X6/?aid=461941810&cid=379080328&page=1

△ Google Play policy update｜July 2021