Your Tech Story

Apple Warns the App Developers to Stop Recording User Screens Without Permission

TechCrunch had reported that many companies having their iOS apps are using the analytics services to record the users’ activities over their iPhone without their knowledge. Upon this Apple has asked the app developers, to disclose the analytic code to the user, or remove the code from their iOS apps, else Apple will remove the apps from Apple Store, itself.

Using the code, these apps capture the users’ data, like their taps, swipes, and even records their full screen, without giving a hint of that to the user. Recording such activities is called Session Replaying. According to App Store’s Review Guidelines, Apple completely prohibits Session Replay feature, without the proper consent of the user.

An Apple spokesperson wrote in an email, “Protecting user privacy is paramount in the Apple ecosystem. Our App Store Review Guidelines require that apps request explicit user consent and provide a clear visual indication when recording, logging, or otherwise making a record of user activity.”

He further added, “We have notified the developers that are in violation of these strict privacy terms and guidelines, and will take immediate action if necessary.”

To capture the users’ activities through the apps, the developers embed code from a third-party company, in this case, those apps used the Glassbox for Session Replaying. Tech Crunch gave a few names that were using Session Replay feature in their apps, including Abercrombie & Fitch, Hotels.com, Air Canada, Hollister, Expedia, and Singapore Airlines.

Those companies are violating Apple’s guidelines as there is no mention of users’ screen recording in their Privacy Policy. Although there has been no confirmation from those companies on capturing the users’ data, Apple has already warned one of those companies to remove the analytics code from their apps. Apple wrote in an email to the developer, “Your app uses analytics software to collect and send user or device data to a third party without the user’s consent. Apps must request explicit user consent and provide a clear visual indication when recording, logging, or otherwise making a record of user activity.”

Apple has also asked the companies, that wants to keep the user experience analytic code embedded in their apps, to include a little red icon on the upper left corner of the iPhone screen, to let people be aware of the apps recording their screen activities.

Upon the whole screen capturing issue, Glassbox has also taken its dig on the matter and has said, “TechCrunch’s piece was interesting but also misleading. Glassbox and its customers are not interested in ‘spying’ on consumers.” The company further said. “Our goals are to improve online customer experiences and to protect consumers from a compliance perspective. Since its inception, Glassbox has helped organizations improve millions of customer experiences by providing tools that record and analyze user activity on websites and apps. This information helps companies better understand how consumers are using their services, and where and why they are struggling. We are strong supporters of user privacy and security. Glassbox provides its customers with the tools to mask every element of personal data. We firmly believe that our customers should have clear policies in place so that consumers are aware that their data is being recorded — just as contact centres inform users that their calls are being recorded.”

The matter clearly is not about Glassbox but is about how the customers’ personal data is being compromised. Apple is serious about the privacy of the data that those apps are capturing, so those app developers must do something in this regard in order to keep their apps running on the iPhone.