iPhone and Android apps now required to have privacy policies

The makers of the most widely used mobile app stores have agreed to comply with a California law requiring mobile apps that collect personal information to have a privacy policy. California Attorney General Kamala Harris announced the agreement today with Apple and Google, which run the two most popular mobile app stores, as well as Amazon, HP, Microsoft, and Research In Motion.

"These platforms have agreed to privacy principles designed to bring the industry in line with a California law requiring mobile apps that collect personal information to have a privacy policy," Harris's office said in a press release. "The majority of mobile apps sold today do not contain a privacy policy."

The agreement doesn't place restrictions on what types of data app makers may collect. But app makers must describe "how personal data is collected, used and shared," and make their privacy policies easily found by users. App store listings will contain either the text of the privacy policy or a link to the policy.

There have been several controversies over mobile app privacy, and one of the most recent centered on the social network Path accessing and uploading iPhone users' contact databases without permission. Harris noted that a Wall Street Journal report last year found "that 45 of the top 101 apps did not provide privacy policies either inside the application or on the application developer’s website," despite the fact that most of the mobile apps were transmitting a phone's unique device ID or location "to other companies without users' awareness or consent." Some apps were also transmitting the user's age, gender, and other personal details.

Read the comments on this post