Hacker News Reader

Comment by TheNewAndy | Hacker News Reader

I think the original poster has seen an example of this, and they think apple could go further.

I certainly was surprised to see the sentence:

"Privacy practices may vary, for example, based on the features you use or your age."

I filled in the questions in app store connect recently, and since it is just a simple game without anything remotely privacy invading, I happily answered all the questions in the most "privacy respecting" way. To then see this sentence hinting that the privacy stuff might be different if people use unspecified features, or be particular ages... that is certainly a surprise.

View on HN

That message comes from the rule where for non-core infrequently-used functionality, an app need not disclose the data collected if it is not used for advertise or tracking, it is clear and obvious what data you are collecting, and you clearly show the user id as a form field.

For example, if your feedback form allows users to optionally enter their email address so you can contact them to request more details if needed, you don't need to specify that you collect email addresses if you never otherwise collect email.

It is not clear if this would also apply if users can optionally upload a profile photo, but profile photos are not a core part of the app (e.g. not a tinder clone). If it does apply it would let you omit the scary sounding 'user photos' option from the privacy list.

It does say that, but it's also a very clear and bold "Data Not Collected"

See screenshot: https://share.barkerja.dev/4vgEhw.jpeg

My issue is the whole “privacy practices may include handling of data as described below”, which on first read always sounds like “great, this app is handling my data for some reason”, only to be followed by “no data collected”. It’s pointlessly verbose to get that point across.

That is the WORST type of privacy practice sentence. I've seen it so often.

"We may collect <x,y and z>, for example <most benign use possible>"

"We may collect your date of birth, for example to wish you a happy birthday!"

I think "for example" sentences should be disallowed.

Reply on news.ycombinator.com