Developers offered tips on mobile app privacy
Over-communicating, recruiting the right talent and knowing the law are all smart ideas, experts say at conference
IDG News Service - Mobile app developers face a huge challenge in keeping up with the fast-changing landscape of data privacy law. They got some tips Wednesday at a conference devoted to the topic in San Francisco.
The services mobile apps provide, which often draw on location, contact lists and other personal data, are raising more and more questions about how appropriately that data is collected and used. Developers are having to ask themselves: Should I notify people when I collect data? Are certain things off limits legally? Am I protected if I tell my users what data I'm collecting? If so, where should I tell them that?
Those questions and others were debated during a conference on mobile app privacy at the University of California's Hastings College of Law in San Francisco.
"Consumers want convenience, social tools and relevance," said Kevin Trilli, vice president of product at San Francisco-based TRUSTe, which works to help companies safely collect and use customer data. "And privacy is hot now because of the data and behavior interaction that enables these apps," he said.
One piece of advice for developers aiming to keep users happy: Don't be afraid to over-communicate. Displaying clear, friendly, plain-English language within the app whenever it asks for certain types of private information is not a bad idea, said Tim Wyatt, director of security engineering at Lookout, a San Francisco-based mobile security company.
"The question is always, 'Will someone be surprised if they find out we're doing this?' If there's a hint that that's the case, then that's when you need an explicit opt-in feature," he said.
For example, if an app has a feature that automatically uploads photos from a smartphone's camera roll, an artfully designed pop-up box could appear when the user gets to that point in the app, saying, "If you let us do this automatically, it will provide a faster, better user experience for you. Would you like us to do that?" Wyatt said.
Others commended this approach. "Most people may not read a long policy, but if you can put little things in along the way where it's most sensitive, that's good," said TRUSTe's Trilli.
Making these types of notifications appear consistently, while always providing consumers the option to opt-out, is also a good idea, others said.
"The thing people don't like is when things happen behind their back," said Casey Oppenheim, cofounder at Disconnect.me, a startup based in Palo Alto that aims to help consumers understand what's happening with their personal information online. With apps that share content liberally among users' friends, for example, "maybe users won't like it, but if they know about it, if you give users some context about what's happening, you may be surprised what they're willing to accept," Oppenheim said.
- Maintain Less. Create More. Spend less on maintenance and spend more time creating with Red Hat Enterprise Linux. Read on to learn how Red Hat can help...
- Flying High on the Use of Red Hat Enterprise Linux Flybe was one of the 21 companies that were interviewed for quantitative results on their operations as part of an IDC ROI analysis....
- Data Protection eGuide In this eGuide, CSO and sister publications IDG News Service, Computerworld, and CIO pull together news, trend, and how-to articles about the increasingly...
- 10 Mistakes to Avoid When Launching Your DG Program From failing to define data governance, to premature launch, or expecting too much from a sponsor, this white paper explains ten common mistakes...
- Keep Servers Up and Running and Attackers in the Dark An SSL/TLS handshake requires at least 10 times more processing power on a server than on the client. SSL renegotiation attacks can readily...
- On Demand: Mastering the Art of Mobile Content Management Mobile device usage in the enterprise has skyrocketed, and it continues to escalate. IT must answer to users who demand access to their... All Legal White Papers | Webcasts