Smartphones and the apps that come along with them are now integral parts of our lives in more ways than one, health included. Most of these apps help us keep our bodies in check and for some, they are fundamental to their well being. However, is our health data as secure as we might think?
The study analyzed over 20,000 mobile apps from the Google Play Store, apps which required the users to disclose their health information. These apps ranged in type from step and calorie counters to menstruation trackers and symptom checkers.
It’s worth noting that, in addition to this information, the apps also require the users to provide them with their email, mobile number or even geolocation info, in some cases.
Muhammad Ikram, a lecturer at the Macquarie University Cyber Security Hub has stated that most of these apps, a staggering 88% of them, to be more exact are “using tracking identifiers and cookies to track user activities on mobile devices, and some of these applications are actually using tracking across different platforms.”
More than 87% of the data collection and 56% of the data transmission was on behalf of advertisers and tracking providers. Out of all this, around 23% of user data transmissions were found to take place via insecure communication channels.
While only about 4% of those apps actively transmitted the users’ data to third parties, the number is still considered substantial enough to raise concern.
Ikram went on to add that “Some of this information collected is used for tracking purposes and profiling purposes, which is done by third parties like advertisers and tracking companies and which is basically a form of data mining and this is done without user consent and it is being done explicitly and implicitly.”
While the report applauded the European General Data Protection Regulation for improving transparency around data collection from apps, Ikram stated that Australia on the other hand, lacked such policies regarding mobile health applications.
However, the study also found that just 1.3% of user reviews found any concerns regarding privacy.
The research soon made its way to Google, who responded via a spokesperson that the company’s “Google Play Developer Policies are designed to protect users and keep them safe. When violations are found, we take action. We are reviewing the report.”