Apple Privacy Labels: The Feud Explained

The feud over Apple’s privacy labels centers on the accuracy and fairness of the “nutrition labels” that appear on App Store listings, which disclose what data an app collects and how it uses that data. Apple introduced these labels in December 2020 to give users a quick, at-a-glance summary of an app’s data practices, but the rollout has been marked by complaints from developers about confusing requirements, inconsistent enforcement, and the competitive pressure of being compared to apps that may not fully disclose their own data collection. This article explains the background, the rules, the criticisms, and how the labels actually work.

Background: Why Apple Created Privacy Labels

Apple’s privacy labels were announced at the Worldwide Developers Conference (WWDC) in June 2020, alongside other privacy features like App Tracking Transparency (ATT). The stated goal was to help users understand an app’s data collection practices before downloading it, similar to how a nutrition label informs food choices. The labels were introduced in response to growing consumer concern about data privacy, and Apple framed them as a way to give users more control and transparency.

The labels are required for all apps and app updates submitted to the App Store. Developers must self-report the types of data they collect, whether that data is linked to the user’s identity, and whether it is used for tracking. The information is then displayed on the App Store product page, so users can see it before they tap “Get.”

How the Labels Work: What Developers Must Report

Apple’s privacy labels are based on a detailed questionnaire that developers fill out in App Store Connect. The form asks about:

• Data collected: Categories like contact info, location, usage data, and health data.
• Data linked to identity: Whether the collected data is linked to the user’s identity or device.
• Data used for tracking: Whether the data is used to track the user across apps or websites.

Developers must also specify the purpose of data collection, such as app functionality, analytics, or advertising. The resulting label shows a list of data types with icons, along with a note if the app uses tracking. For example, a social media app might list “Location,” “Contacts,” and “Usage Data” with a note that some data is linked to the user and used for tracking.

The Feud: Developer Complaints and Criticisms

The feud over privacy labels has multiple fronts. One major complaint is that the labels are self-reported, meaning Apple does not verify the accuracy of the information. This has led to accusations that some apps underreport their data collection, giving them an unfair advantage over competitors who are more transparent. For instance, a 2022 study by the Washington Post found that many popular apps had privacy labels that did not match their actual data practices, with some apps collecting data that was not listed on their labels.

Another criticism is that the labels are confusing and can be misleading. For example, an app that collects no data at all shows a label that says “Data Not Collected,” which can be interpreted as a badge of honor, even though the app might still use third-party SDKs that collect data. Conversely, an app that collects data for legitimate purposes like crash reporting might appear more invasive than it actually is.

Developers have also complained about the lack of clarity in Apple’s guidelines. The distinction between “data linked to you” and “data not linked to you” is not always clear, and Apple has been inconsistent in its enforcement. Some developers have reported that their apps were rejected for incorrect labels, while others have seen apps with obviously wrong labels remain on the store for months.

How to Choose an App Based on Privacy Labels

Privacy labels are a useful starting point, but they should not be the only factor in your decision. Here are some tips for interpreting them:

• Look for “Data Not Collected”: If an app has this label, it means the developer claims to collect no data. This is the most privacy-friendly option, but be aware that it does not guarantee the app is free of third-party trackers.
• Check for tracking: If an app lists “Tracking” as a purpose, it means the app can track you across other apps and websites. This is often used for advertising, and you can opt out via App Tracking Transparency prompts.
• Compare similar apps: Look at the labels of competing apps to see which one collects less data. For example, a note-taking app that collects only usage data is likely more private than one that collects location and contacts.
• Read the full privacy policy: The label is a summary, not a full disclosure. For a deeper understanding, read the app’s privacy policy, which should explain how data is handled in more detail.

Common Problems and Misconceptions

One common misconception is that a privacy label with many data types means the app is malicious. In reality, many legitimate apps collect data for essential functions like syncing or crash reporting. The label is about transparency, not judgment.

Another problem is that the labels are not updated in real time. If a developer changes their data practices, they must submit an updated label, but Apple does not always review it promptly. This means the label you see might be outdated.

There is also the issue of “data not linked to you.” Apple defines this as data that is not associated with your identity, such as anonymized usage statistics. However, the line between linked and not linked can be blurry, and some developers may use this category to downplay data collection that could still be used to identify you.

Comparison: Apple vs. Google Play Data Safety

Apple’s privacy labels are often compared to Google Play’s “Data Safety” section, which was introduced in 2022. Both require developers to disclose data collection, but there are key differences:

• Verification: Google Play also relies on self-reporting, but it has a more detailed form that asks about data collection, sharing, and security practices. Apple’s form is simpler but less granular.
• Enforcement: Apple has been more aggressive in enforcing its labels, with app rejections for missing or incorrect information. Google Play has been more lenient, though it has started to require data safety declarations for all apps.
• Display: Apple’s labels are shown as a list of data types with icons, while Google’s are shown as a summary with categories like “Data collected” and “Data shared.” Google’s also includes a section on security practices, which Apple does not.

Both systems have been criticized for being self-reported and potentially inaccurate, but they represent a step forward in user transparency.

Costs and Alternatives for Developers

For developers, complying with privacy labels has a cost in terms of time and engineering effort. They must audit their data collection, update their privacy policies, and fill out the forms accurately. This can be particularly burdensome for small developers who may not have a dedicated privacy team.

Alternatives to Apple’s privacy labels include third-party privacy scores and certifications, such as the Privacy Badger or the Electronic Frontier Foundation’s (EFF) “Privacy Not Included” guide. These are not official, but they offer an independent assessment of an app’s privacy practices. However, they are not as widely recognized as the App Store labels.

Frequently Asked Questions

Are Apple privacy labels accurate?

Not always. The labels are self-reported by developers, and Apple does not verify the information. Studies have shown that some apps’ labels do not match their actual data practices, so it’s wise to use them as a guide rather than a guarantee.

What does “Data Not Collected” mean?

It means the developer claims that the app does not collect any data from you. However, this does not account for data collected by third-party SDKs or services that the developer may not have full control over.

Can I opt out of tracking if an app has a tracking label?

Yes. When an app wants to track you across other apps and websites, it must show a prompt asking for your permission. You can choose “Ask App Not to Track,” and the app must respect your choice.

Why do some apps have more data types than others?

Apps that require more functionality, such as social media or navigation, often need to collect more data. A simple calculator app, for example, might collect no data at all. The number of data types is not necessarily a measure of how “bad” an app is.

How often are privacy labels updated?

Developers must update their labels whenever they change their data practices, but Apple does not have a set schedule for reviewing these updates. As a result, a label might be outdated if the developer has not submitted a new one.

Do privacy labels apply to all apps?

Yes, all apps on the App Store, including free and paid apps, must have a privacy label. This includes apps that are pre-installed on Apple devices, though those are not subject to the same review process.

Related

• Blox Fruits Tiger Fruit Guide: Moves, Awakening & More
• Dyson Airwrap Styler: Use It Without Damaging Hair
• Fix Steam Remote Play Not Working