Study Finds Android App Logs Often Expose Data Not Disclosed in Privacy Policies
Summary
A study of 1,000 Android apps found that fewer than one-third of privacy policies mention logging, and only four matched sensitive data observed in logs. Researchers recommend CI log audits, SDK data-flow reviews, and retention and redaction controls.
Key points
- Researchers analyzed privacy policies and runtime logs from 1,000 Android apps across 43 categories.
- Fewer than one-third of the policies mentioned logging; many disclosures were vague.
- Only four apps had policies that matched the types of sensitive data found in their logs.
- Around three-quarters of observed IP-address leakages were undisclosed; device identifiers were also frequently undisclosed.
- Third-party crash reporting, analytics, and advertising SDKs can send log data to external servers without privacy-team review.
- Recommended controls include CI-stage log audits, reviewing logging in privacy impact assessments, inventorying SDK data flows, and applying retention limits and redaction.
Article Details
- Publisher
- Help Net Security
- Scope
- Comparison of privacy-policy disclosures with runtime logging practices in Android apps across 43 categories.
- Sample Size
- 1,000 Android apps
- Key Statistics
- Fewer than one in three policies mentioned logging practices.
- Among policies that mentioned logging, roughly a quarter used vague or generic language.
- Only 4 of the 1,000 apps had policies whose disclosures matched the types of sensitive data found in their logs.
- Around three-quarters of observed IP-address leakages were undisclosed in the corresponding privacy policy.
- Disclosure of device manufacturer and model identifiers was missing for nearly all observed cases.
- Recommendations
- Audit log output during CI, using pattern matching for sensitive data and expanding detection where appropriate.
- Include production logging in privacy impact assessments.
- Inventory third-party SDKs receiving log data and document the data categories they transmit in privacy policies.
- Apply retention limits and redact identifiers from log streams.