Apple Starts Removing Apps That Share Location Data With Third Parties

[MacRumors]

Apple has stepped up its policy of removing apps from the App Store that violate its guidelines by sharing location data with third parties without explicit consent.

As noted by 9to5Mac, Apple appears to have ratcheted up its software scrutiny in the last few days by informing affected developers by email that upon re-evaluation, their app violates two sections of the App Store Review Guidelines and will therefore be removed from sale:

Apple finally decided to start enforcing guidelines on selling location data via @jeromep1970 pic.twitter.com/YKAWfMBq35 - Thomasbcn (@Thomasbcn) May 7, 2018

Legal - 5.11 & Legal 5.1.2
The app transmits user location data to third parties without explicit consent from the users and for unapproved purposes.

Apple's contention is that the apps in question don't provide enough clear information to users regarding what their data is used for and how it's shared once it's been collected. There also seems to be concern that the data collection isn't specifically for improving the user experience or enhancing app performance.

The company's retrospective action is likely related to General Data Protection Regulation (GDPR), which sets the rules for how businesses manage and share the personal data of customers.

GDPR is a European Union rule to protect EU citizens, but as with its website cookie consent policy, basically every company with an online presence is affected by the law. An updated version of the GDPR goes into effect on May 25 to underline this applicability. Interested readers can find a summary of the key changes to the regulations here.

Article Link: Apple Starts Removing Apps That Share Location Data With Third Parties

 

[nwcs]

Good, that is a shady practice of those apps in any case. What might spur more action is if Apple could let us know if we have already downloaded such apps so that we can make an informed decision to continue using them while an update may or may not be provided.

 

[Ted13]

Very glad to hear this. Just hoping MoviePass isn't one of them

 

[keysofanxiety]

Fantastic news. Apple's view on privacy is getting more staunch as time goes on. Normally it's the other way around.

 

[nnoble]

Hopefully these initiatives by Apple will continue. As individuals we haven’t got a hope of avoiding app developers who aim to deceive.

 

[nylonsteel]

good

 

[H3LL5P4WN]

I'm just hoping it doesn't affect anything I currently have, ie nothing I've downloaded/bought has been leaching off me.

 

[RobaxMan]

Apple acknowledges tracking iMessage metadata and sharing it with law enforcement

In a document about Apple's iMessage system obtained by The Intercept, the Florida Department of Law Enforcement's Electronic Surveillance Support Team noted that when users enter a phone number into iMessage, metadata is periodically uploaded to Apple servers to check whether a text should be routed through iMessage or standard SMS. This material includes not just phone numbers but the date and time of the lookup, and the querying user's IP address.

While the data doesn't include message contents, or even reveal when conversations happened, it could potentially be used to identify who a person is associating with, and/or trace an IP address back to a real-world location.

Responding to The Intercept, Apple acknowledged the data collection, saying that it retains logs for 30 days and hands them over when served with a valid legal request. Because these orders can sometimes be extended in 30-day blocks, though, it's possible that some people are being tracked for longer durations.

"When law enforcement presents us with a valid subpoena or court order, we provide the requested information if it is in our possession," Apple said in an official statement. "Because iMessage is encrypted end-to-end, we do not have access to the contents of those communications. In some cases, we are able to provide data from server logs that are generated from customers accessing certain apps on their devices. We work closely with law enforcement to help them understand what we can provide and make clear these query logs don't contain the contents of conversations or prove that any communication actually took place."

https://appleinsider.com/articles/1...-metadata-and-sharing-it-with-law-enforcement

 

[bluecoast]

I had no idea that Apple even allowed apps to do this in the first place. I guess I was pretty naive and trusted them to do the right thing.

Since the Facebook controversy and looking into GDPR, here in Europe, I'm really shocked as to how much our data is unprotected and used for all sorts of reason, without our direct consent being given.

I hope that Apple really doubles down on privacy with iOS 12 and makes it its key feature. Here's hoping.

 

[now i see it]

FBI sting fake apps getting the boot? Unlikely.

 

[mejsric]

Google should copy this, too.

 

[EVGabe]

*not applicable in China

 

[Stella]

Good.

But Apple should be consistent with applying its rules. They shouldn't have been there in the first place.

GDPR, while for EU citizens, also benefits non-EU citizens. Excellent.

 

[pete2106]

Very glad to hear this. Just hoping MoviePass isn't one of them

Any app that uses your location is collecting and selling that data.

 

[pat500000]

Good job. Apple.

 

[n0m0n]

Apple has stepped up its policy of removing apps from the App Store that violate its guidelines by sharing location data with third parties without explicit consent.

As noted by 9to5Mac, Apple appears to have ratcheted up its software scrutiny in the last few days by informing affected developers by email that upon re-evaluation, their app violates two sections of the App Store Review Guidelines and will therefore be removed from sale:

​

Apple's contention is that the apps in question don't provide enough clear information to users regarding what their data is used for and how it's shared once it's been collected. There also seems to be concern that the data collection isn't specifically for improving the user experience or enhancing app performance.

The company's retrospective action is likely related to General Data Protection Regulation (GDPR), which sets the rules for how businesses manage and share the personal data of customers.

GDPR is a European Union rule to protect EU citizens, but as with its website cookie consent policy, basically every company with an online presence is affected by the law. An updated version of the GDPR goes into effect on May 25 to underline this applicability. Interested readers can find a summary of the key changes to the regulations here.

Article Link: Apple Starts Removing Apps That Share Location Data With Third Parties

[doublepost=1525874341][/doublepost]Presently is there a way for a user to find out which apps are in question?

Thanks

 

[JosephAW]

One of the reasons I don't use Snapchat, requires "always on" access to the camera.

 

[Sasparilla]

Nice to see this. Would have been nicer to have bounced these guys before, but better late than never.

BTW Apple, we'd really like to know who was violating this.

 

[1369281]

Why hasn’t Facebook been removed from the App Store then?

 

[RobaxMan]

How much does Google pay Apple every year, to be the default search engine?

 

[Starlights]

Google should copy this, too.

Not likely. Monetising users data is a primary revenue stream for google. One pf the primary reason i moved from Android to IOS.

 

[guzhogi]

I had no idea that Apple even allowed apps to do this in the first place. I guess I was pretty naive and trusted them to do the right thing.

Since the Facebook controversy and looking into GDPR, here in Europe, I'm really shocked as to how much our data is unprotected and used for all sorts of reason, without our direct consent being given.

I hope that Apple really doubles down on privacy with iOS 12 and makes it its key feature. Here's hoping.

Like Starlights says in the below comment, user data is a valuable commodity. Unfortunately, some people and companies value making money over people's privacy. Kinda mad over the lack of privacy. I know some people want better ads/content targeting them, and don't mind giving personal information. But the companies at least be upfront about sharing your information and be an opt in service.

Not likely. Monetising users data is a primary revenue stream for google. One pf the primary reason i moved from Android to IOS.

 

[neutralguy]

Why hasn’t Facebook been removed from the App Store then?

Plus Snapchat! Please apple ban this app. It will save next generation!

 

[Jim Lahey]

There are no negatives to come out of this for users. Great stuff.

 

[mtneer]

Why hasn’t Facebook been removed from the App Store then?

They got lawyers, good lawyers, highly paid lawyers. It's a lot easier to grandstand against a bunch of noname developers than pick a fight with companies that can afford to fight back.