The industry for children's apps is thriving at the cost of children's privacy: these apps routinely disclose children's data to multiple data trackers and ad networks. As children spend increasing time online, such exposure accumulates to long-term privacy risks. In this paper, we used a mixed-methods approach to investigate why this is happening and how developers might change their practices. We base our analysis against 5 leading data protection frameworks that set out requirements and recommendations for data collection in children's apps. To understand developers' perspectives and constraints, we conducted 134 surveys and 20 semi-structured interviews with popular Android children's app developers. Our analysis revealed that developers largely respect children's best interests; however, they have to make compromises due to limited monetisation options, perceived harmlessness of certain third-party libraries, and lack of availability of design guidelines. We identified concrete approaches and directions for future research to help overcome these barriers.
翻译:儿童应用软件行业以儿童隐私为代价蓬勃发展:这些应用程序经常向多个数据跟踪器和广告网络披露儿童数据。随着儿童在网上花费越来越多的时间,这种接触会积累到长期的隐私风险中。在本文中,我们采用了混合方法来调查为什么会发生这种情况,以及开发商如何改变做法。我们根据5个主要数据保护框架进行分析,这些框架规定了儿童应用软件数据收集的要求和建议。为了了解开发商的观点和制约因素,我们进行了134次调查和20次半结构性访谈。我们的分析显示,开发商基本上尊重儿童的最佳利益;然而,由于货币化选择有限,某些第三方图书馆被认为无害,以及缺乏设计准则,他们不得不做出妥协。我们为今后的研究确定了具体的方法和方向,以帮助克服这些障碍。