The Overview of Privacy Labels and their Compatibility with Privacy Policies

TL;DR

This paper reviews privacy labels used in app stores, analyzing their details and how well they align with privacy policies, to improve understanding of app data practices at scale.

Contribution

It provides an overview of privacy labels, examining their content, implementation, and compatibility with privacy policies across major app platforms.

Findings

Privacy labels contain detailed data practices information.

Platforms mandate privacy labels to enhance transparency.

Potential gaps between labels and policies identified.

Abstract

Privacy nutrition labels provide a way to understand an app's key data practices without reading the long and hard-to-read privacy policies. Recently, the app distribution platforms for iOS(Apple) and Android(Google) have implemented mandates requiring app developers to fill privacy nutrition labels highlighting their privacy practices such as data collection, data sharing, and security practices. These privacy labels contain very fine-grained information about the apps' data practices such as the data types and purposes associated with each data type. This provides us with a unique vantage point from which we can understand apps' data practices at scale.