Google Play issues security warning to app developers

Powered by SC Magazine
 

Devs given 30 days to fix bad apps.

Google Play has issued a letter to developers to address changes in policy to crack down on insecure and dangerous apps.

The letter said that Google had made changes to its policies in regard to ‘dangerous products' that disclose personal information without authorisation and the behaviour of adverts in applications.

Google said that it is providing more detail on the kinds of dangerous products that are not allowed on Google Play, and has added a new section that addresses advert behaviour in apps.

“First, we make it clear that adverts in your app must follow the same rules as the app itself. Also, it is important to us that adverts don't negatively affect the experience by deceiving consumers or using disruptive behaviour such as obstructing access to apps and interfering with other adverts.”

This policy states that adverts are considered part of the app for the purposes of content review and compliance with the developer terms, so all policies, including those concerning illegal activities, violence, sexually explicit content and privacy violations, apply.

Google said it must be clear to the user which app each ad is associated with or implemented in. Adverts must not make changes to the functioning of the user's device outside the ad by doing things such as installing shortcuts, bookmarks or icons or changing default settings without the user's knowledge and consent.

“If an ad makes such changes it must be clear to the user which app has made the change and the user must be able to reverse the change easily, by either adjusting the settings on the device, advertising preferences in the app, or uninstalling the app altogether.”

Also, adverts must not simulate or impersonate system notifications or warnings and adverts associated with an app must not interfere with any adverts on a third-party application, it said.

Research by MWR Infosecurity and Channel 4 News found that some leading applications were sending personal data back from devices to advertising companies without user knowledge and that permissions were granted to the apps when they were downloaded.

Updating its Google Play developer program policy, Google said that it is required to update its policies when it launches new features and when it sees unhealthy behaviour such as deceptive app names and spam notifications.

It has also restricted the use of names or icons that are "confusingly similar to existing system apps in order to reduce user confusion".

It said that any existing apps will be given 30 days to fix and republish the application and after this period, existing applications discovered to be in violation may be subject to warning or removal from Google Play.

This article originally appeared at scmagazineuk.com

Copyright © SC Magazine, UK edition


Google Play issues security warning to app developers
 
 
 
Top Stories
ATO shaves $4m off IT contractor panel
Reform cuts admin burden, introduces KPIs.
 
Turnbull introduces data retention legislation
Still no definition of metadata to be stored.
 
Crime Commission prepares core systems overhaul
Will replace 30 year-old national criminal database.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Do you direct debit customers? Read this
Oct 10, 2014
Authorities have been targeting direct debit practices with iiNet and Dodo receiving formal ...
Optus expands 4G coverage
Oct 10, 2014
If you rely on an Optus phone for work you might be interested to know that there are now 200 ...
Microsoft Office is now free for some charities
Oct 10, 2014
Microsoft has announced that eligible Australian non-profit organisations and charities can now ...
Vodafone lights up 4G in Adelaide
Oct 9, 2014
Live and work in Adelaide? Vodafone has switched on its 4G network in the city and suburbs.
Next year tradies will be able to take payments using ingogo
Oct 3, 2014
Ingogo is going to provide a card payment service for Xero users.
Latest Comments
Polls
In which area is your IT shop hiring the most staff?




   |   View results
IT security and risk
  27%
 
Sourcing and strategy
  13%
 
IT infrastructure (servers, storage, networking)
  21%
 
End user computing (desktops, mobiles, apps)
  14%
 
Software development
  25%
TOTAL VOTES: 437

Vote
Would your InfoSec team be prepared to share threat data with the Australian Government?

   |   View results
Yes
  54%
 
No
  46%
TOTAL VOTES: 210

Vote