These things read like legal terms of service notices, so pretty much not digestible for anyone. I guess full disclosure is a decent enough start.
Really we need parental advisory ratings like we have for movies to easily know which apps sell data.
Really we need parental advisory ratings like we have for movies to easily know which apps sell data.
There are a dozen or so items split between three lists: (1) Data Used to Track You, (2) Data Linked to You, and (3) Data Not Linked to You. The distinction between (1) and (2) is not entirely clear.
The language is ishy-washy: "The following data may be collected and linked to your identity." Is or isn't it? I would like to see firm language: "...data will be collected..."
> Really we need parental advisory ratings like we have for movies to easily know which apps sell data.
I agree. There's value in the App Store privacy labels if you really dive in, but I doubt that many people will scroll to the bottom of an app page to properly read the privacy label.
I think it'd be useful for many users to see a punchy above-the-fold badge that says "Privacy-friendly", "Uses some personal data", or "Uses a lot of personal data" (or terser copy to those effects) and links to the detailed privacy label further down-page.
If an app offers 99% online experiences, and there's one part of the service where you can choose to have something physically shipped to you, they have to say that they collect your physical/mailing address. There's no way for the app to tell you when it does or doesn't do that.
The same is true for many other things - optional 2FA via SMS (phone number), optional search for nearest location (location tracking) etc.
I think perhaps that there needs to be some better way of distinguishing how the categories work. Should anyone be surprised that Amazon needs payment details and an address to send you something?