Skip to content

Too many "data sharing yes" for Google SDKs? #33

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
m-melis opened this issue Feb 25, 2022 · 6 comments · Fixed by #36
Open

Too many "data sharing yes" for Google SDKs? #33

m-melis opened this issue Feb 25, 2022 · 6 comments · Fixed by #36

Comments

@m-melis
Copy link

m-melis commented Feb 25, 2022

Hi,
first, thanks for your work, much appreciated.

I'm a bit in doubt about a few instances when data sharing has been flagged as yes in the list. I can clearly distinguish two cases for google SDKs. In their documentation, you can find "Data collected and shared automatically" and "Data collected automatically". So we have:

Data collected and shared automatically

  • AdMob
  • UMP (this can also be included in your list)

Data collected automatically (shared not mentioned)

Sharing of course also depends on your actual usage of data but talking about automatic sharing, I can only see confirmation of what is listed above.

M.

@vaibhavantil2
Copy link
Contributor

@m-melis Thanks for pointing out. The reason I have assigned sharing for these SDKs is that sharing is considered when data goes to a third party and they process data for their own purposes. For Google, it seems they do that a lot.

However, I will again re-read it and revert.

@vaibhavantil1
Copy link
Contributor

@m-melis - One more thing. I have built a free Data Safety Form Generator. Would you be kind enough to be a beta user and give us feedback?

Link to tool: https://github.com/Privado-Inc/privado

@m-melis
Copy link
Author

m-melis commented Feb 25, 2022

@m-melis - One more thing. I have built a free Data Safety Form Generator. Would you be kind enough to be a beta user and give us feedback?

Link to tool: https://github.com/Privado-Inc/privado

Sure, going to check!

@vaibhavantil1
Copy link
Contributor

@m-melis Did you get a chance to try our CLI tool that automatically generates Play Store Data Safety Report? Really look forward to your feedback.

@vaibhavantil2
Copy link
Contributor

@m-melis - One more thing. I have built a free Data Safety Form Generator. Would you be kind enough to be a beta user and give us feedback?
Link to tool: https://github.com/Privado-Inc/privado

Sure, going to check!

@m-melis - Let me know if you need some help in trying out the tool.

@scottg489-tw
Copy link

We are wondering this as well. In particular, would Google Analytics be considered a "Service provider" via the definition here?
https://support.google.com/googleplay/android-developer/answer/10787469?hl=en#sharing&zippy=%2Cdata-sharing

“Service provider” means an entity that processes user data on behalf of the developer and based on the developer’s instructions.

And on top of that, if you are only gathering default information, would it not be considered "Anonymous data"?

Anonymous data. Transferring user data that has been fully anonymized so that it can no longer be associated with an individual user.

If the answer is "yes" to either of these, then it wouldn't be considered sharing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants