Over 5,000 Dangerous Android Apps Are Tracking Kids' Activities
Researchers at the Berkeley International Computer Science Institute analyzed 5,855 of the most popular free Android apps aimed at children and families, and found that 57% of the apps violated the Children's Online Privacy Protection Act.
The team found the results using an automated test to detect data being processed in Android apps.
It is known that 92% of Facebook's 1,280 API applications are being used for activities prohibited by COPPA, a 1998 law that protects the privacy of users under the age of 13.
![]() |
19% of child-targeted apps collect personally identifiable information using software development kits (SDKs) that have terms of service that collect and send user data. Additionally, 2,344 apps do not use TLS for any transmissions containing sensitive information.
The study also found that 1,100 of these apps (18.8%) sent data using non-child-directed SDKs with prohibited terms of service, common examples include language learning apps like Duolingo, games like Minion Rush, and Disney Where's My Water?
“This study has uncovered the unfortunate truth that tech companies are failing to follow the rules and leaving children vulnerable,” said Scott Shackelford, associate professor of business law and ethics at Indiana University.
When asked whether iOS or Android is better for kids, Scott added: "No platform is perfect, but parents should know that iOS will have an advantage over Android in both privacy and security."
He also advises parents to be more proactive: "To really get ahead of this, parents should use software like FamilyTime to keep a closer eye on the apps their kids are using, and make sure private browsers and extensions like DuckDuckGo and Privacy Badger are up to standard."