Mobile apps still collect data on US children

WASHINGTON (AP) — A landmark 2013 law aimed at protecting the privacy of America's youngest mobile consumers hasn't stopped app developers from collecting vast amounts of data, including a person's location and even recordings of their voice, according to privacy researchers and consumer advocates.

Whether mobile app developers seek parental consent first — as required by law — or pass the information on to advertisers isn't entirely clear. But if persons prefer to stay anonymous, their options are limited: Wade through each mobile app's privacy policies to make sure of the terms, or stick the phone on "airplane mode" to shut off the wireless connection and risk losing functionality.

"Kids are such a lucrative market, especially for apps," said Jeff Chester, executive director of the Center for Digital Democracy. "Unfortunately, there are still companies out there that are more concerned about generating revenue than protecting the privacy of kids."

Americans have traded vast amounts of personal data in exchange for the ease and functionality of fun mobile applications on their phones. But how is industry using that information? Chester and other consumer advocates allege that fast food chains are increasingly focusing advertising dollars on digital media, targeting blacks and Hispanics. They also warn that data from phones can be combined with offline information like home prices, race or income in ways that could violate fair lending laws. And a new site, PrivacyGrade.org, found that many popular kids' apps like Talking Tom and Fruit Ninja collect information in ways parents wouldn't necessarily expect.

Concerned in particular about industries' focus on kids online, the Federal Trade Commission in July 2013 expanded the Child Online Privacy Protection Act, or COPPA, to require app developers to get parental consent before collecting personal data on anyone younger than 13. That includes information like the unique identifying device on a phone, a person's phone number or a device's location.

"It's upped the ante for companies deciding whether they are going to market to kids," said Michelle De Mooy of the Center for Democracy and Technology. "And that's a good thing."

But with the number of smartphones expected to reach 3.5 billion in the next five years, according to Forrester Research, the mobile app and advertising industry has exploded. Regulators don't have an easy, automated way of analyzing the hundreds of mobile apps popping up each day.

Since the updated regulation went into effect, the FTC has brought about only two enforcement actions against mobile apps. Last September, the commission announced that Yelp Inc. agreed to pay $450,000 and TinyCo. $300,000 to settle separate charges that their companies knowingly collected information on young children through their mobile apps.

"Our ultimate goal is compliance," said Kandi Parsons, an attorney in the FTC's Bureau of Consumer Protection. But "that doesn't undermine our desire to bring cases against companies that violate COPPA ... where we find violations, we will bring cases against mobile apps."