COVER

June 2012 FPF Mobile Apps Study INSIDE COVER

ABOUT THE FUTURE OF PRIVACY FORUM The Future of Privacy Forum (FPF) is a Washington, DC-based think tank that seeks to advance responsible data practices. The forum is led by Internet privacy experts Jules Polonetsky and Christopher Wolf and includes DQDGYLVRU\ERDUGFRPSULVHGRIOHDGLQJĺJXUHVIURPLQGXVWU\DFDGHPLDODZDQG advocacy groups. FPF hosts ApplicationPrivacy.org that aims to provide application GHYHORSHUV ZLWK WKH WRROV DQG UHVRXUFHV QHFHVVDU\ WR LPSOHPHQW UHVSRQVLEOH information collection and use practices. The site includes links to privacy policy generators and our recently released “Best Practices for Mobile $SSOLFDWLRQ'HYHORSHUV5HSRUWrFUHDWHGMRLQWO\ZLWKWKH&HQWHUIRU'HPRFUDF\ and Technology. 5HVHDUFK IRU WKH -XQH  )3) 0RELOH $SSV 6WXG\ ZDV OHG E\ )3) /HJDO  3ROLF\ )HOORZ /LD 6KHHQD DQG DVVLVWHG E\ OHJDO LQWHUQV -RKQ $OIRUG DQG Rachel Coffin. June 2012 FPF Mobile Apps Study

TABLE OF CONTENTS

I. Introduction ...... 1

II. Description ...... 1

III. Study Results ...... 2

IV. Methodology ...... 6

V. Resources ...... 6

Exhibit 1: Free Apps ...... 7

Exhibit 2: Paid Apps ...... 9 1

I. INTRODUCTION II. DESCRIPTION 6PDUWSKRQHVKDYHEHFRPHXELTXLWRXVZLWK 7KHSXUSRVHRIWKLVVWXG\ZDVWRH[DPLQHZKHWKHU sixty-five percent of the U.S. population, or over the most popular apps8SURYLGHGXVHUVZLWKDFFHVV 200 million people, estimated to have a smartphone to a privacy policy. While simply providing a privacy or tablet by 2015.1,QWKLVLQWHUFRQQHFWHGZRUOG policy is not a panacea for privacy concerns, WKHUDSLGO\JURZLQJPDUNHWRIDSSVSUHVHQWV developers that do so have indicated that they have XVHUVDQGVRFLHW\ZLWKPDQ\EHQHILWVEXWLW at least taken a minimum step to document their also raises privacy concerns. Mobile apps can data use and have accepted legal responsibility FDSWXUHDVOHZRIKLJKO\SHUVRQDOLQIRUPDWLRQ for these commitments. With a privacy policy, including location, address books, photos, texts, FRQVXPHUVKDYHDQRSSRUWXQLW\WRLQYHVWLJDWHKRZ HPDLOVVRFLDOQHWZRUNUHODWLRQVKLSVDQGFDOHQGDU WKHLUGDWDZLOOEHXVHGEHIRUHGHFLGLQJWREX\RU items. Past studies2KDYHVKRZQWKDWWKHUHLV GRZQORDGDQDSS*LYHQWKHFRQWLQXHGH[SORVLYH substantial room for improvement in providing JURZWKLQWKHQXPEHURIPRELOHDSSVGRZQORDGHG XVHUVZLWKQRWLFHDQGWUDQVSDUHQF\ZLWKUHJDUG by consumers, FPF decided to expand the scope WRKRZDSSVFROOHFWVWRUHDQGXVHWKHLUGDWD of our previous app studies to examine 150 of the most popular mobile apps across three platforms: The FTC’s Mobile Apps For Kids report, released 9 in February 2012, revealed that many kids’ apps iOs App Store, , and Kindle still lack privacy policies.3 The California Attorney )LUH$SSVWRUH7KHWRSWZHQW\ILYHIUHHDQG *HQHUDOpVRIILFHKDVLQGLFDWHGWKDWLWZLOOHQIRUFH WZHQW\ILYHSDLGDSSVDFURVVDOOWKUHHSODWIRUPV California’s Online Privacy Protection Act against ZHUHWKHIRFXVRIWKLVVWXG\7KHSUHYLRXV)3) app developers. Under the act, commercial study in September 2011 looked at the top ten RSHUDWRUVRIDZHEVLWHRURQOLQHVHUYLFHWKDW free and ten paid apps across three platforms: collects personal identifying information from iOS App Store, Google Android Market, and California residents must have a clearly posted %ODFNEHUU\ 5,0 )XWXUHVWXGLHVZLOOORRNDW privacy policy that details the type of information Microsoft, Facebook, and third party app stores. FROOHFWHGKRZWKDWLQIRUPDWLRQZLOOEHVKDUHGDQG Apple recently announced that roughly 25 billion KRZFRQVXPHUVPD\UHYLHZDQGPDNHFKDQJHVWR DSSVKDYHEHHQGRZQORDGHG10 and over 20 billion their stored information.4 To this end, in February DSSVKDYHEHHQGRZQORDGHGIURP*RRJOH11 Both 2012, the California Attorney General struck an VWRUHVFRQWLQXHWRJURZHDFKFXUUHQWO\DYHUDJLQJ DJUHHPHQWZLWKVL[PDMRUDSSVWRUHSODWIRUPV RYHUELOOLRQDSSOLFDWLRQGRZQORDGVDPRQWK12 setting forth requirements related to app privacy.5 1HZHUWRWKHDSSHFRV\VWHPLV$PD]RQpV.LQGOH Recently, Facebook also joined this agreement )LUH$SSVWRUHZKLFKKDVUHFHQWO\DQQRXQFHGWKDW the store contains over 31,000 apps after its first DQGLVQRZUHTXLULQJWKDWDOODSSVLQLWV$SS&HQWHU 13 have privacy policies.67KLVZHHNWKH&RPPHUFH year. 7RSDSSVLQWKHVHWKUHHDSSVWRUHVZHUH Department’s National Telecommunications thoroughly examined for a privacy policy. We DQG,QIRUPDWLRQ$GPLQLVWUDWLRQZLOOFRQYHQHD ORRNHGDWKRZPDQ\IUHHDQGSDLGDSSVSURYLGHG multi-stakeholder effort intended to develop a code privacy policies on the listing page of conduct for mobile application transparency.7 qOLVWLQJSDJHr RUDFFHVVIURPZLWKLQWKHDSS (“in-app” access). If access to a privacy policy via This study concludes that app developers have DK\SHUOLQNZDVQRWIRXQGRQWKHOLVWLQJSDJHRU begun to heed the call for privacy policies. IURPZLWKLQWKHDSSUHVHDUFKHUVWKHQVHDUFKHG 7KHSHUFHQWDJHRIDSSVZLWKSULYDF\SROLFLHV WKHZHEIRUDQDSSOLFDEOHSULYDF\SROLF\RQWKH KDVJURZQUDSLGO\VLQFHWKHSUHYLRXV)3) GHYHORSHUpVZHEVLWHWKDWFRYHUHGPRELOHDSSV study conducted in September 2011.

1 http://news.cnet.com/8301-13506_3-20095949-17/in-stat-majority-in-u.s-to-have-smartphones-tablets-by-2015/ 2 FTC Mobile Apps Report, “Mobile Apps for Kids: Current Privacy Disclosures are Disappointing,” available at http://www.ftc.gov/os/2012/02/120216mobile_apps_kids. SGI)XWXUHRI3ULYDF\)RUXP6HSWHPEHU0RELOH$SSV6XUYH\DYDLODEOHDWKWWSZZZIXWXUHRISULYDF\RUJISIVXUYH\ðQGVIUHHPRELOHDSSVEHWWHUWKDQ SDLGRQSULYDF\SROLFLHV)XWXUHRI3ULYDF\)RUXP0D\0RELOH$SSV6XUYH\DYDLODEOHDWKWWSZZZIXWXUHRISULYDF\RUJISIðQGVQHDUO\WKUHHTXDUWHUV of-most-downloaded-mobile-apps-lack-a-privacy-policy/, Wall Street Journal Article, “Your Apps are Watching you,” available at http://online.wsj.com/article/SB10001424 052748704694004576020083703574602.html 3 FTC Mobile Kids’ App Report, “Mobile Apps for Kids: Current Privacy Disclosures are Disappointing,” available at http://www.ftc.gov/os/2012/02/120216mobile_apps_ kids.pdf 4 Cal. Bus. & Prof. Code §§ 22575-22579 5 http://news.cnet.com/8301-30977_3-57383255-10347072/california-ag-kamala-harris-on-app-privacy-deal-podcast/ 6 KWWSDUWLFOHVODWLPHVFRPMXQEXVLQHVVODðIDFHERRNDJ 7 http://www.ntia.doc.gov/other-publication/2012/july-12-2012-privacy-multistakeholder-meeting-details “The objectives of the July 12, 2012 meeting are to: 1) promote discussion among stakeholders concerning mobile app transparency by employing a structured, open process; and 2) provide a venue for stakeholders to agree on the schedule and format of future meetings.” 8 According to various app platform metrics. See Methodology Section on page 6 9 Google Play was previously referred to as Google Marketplace 10 http://www.apple.com/pr/library/2012/03/05Apples-App-Store-Downloads-Top-25-Billion.html 11 http://www.engadget.com/2012/06/27/google-play-hits-600000-apps/ 12 http://techcrunch.com/2012/05/07/google-play-about-to-pass-15-billion-downloads-pssht-it-did-that-weeks-ago/ 13 KWWSJLJDRPFRPPRELOHNLQGOHðUHKHOSVDPD]RQDSSVWRUHKLWVDSSVLQðUVW\HDU 2

June 2012 FPF Mobile Apps Study

III. THE STUDY RESULTS A. Percentage of Top Apps that B. Percentage of Apps that have a have a Privacy Policy Privacy Policy in Each App Store Table 1 sets forth the total percentage of all 150 7KHIROORZLQJWDEOHVUHIOHFWWKHSHUFHQWDJHRIWRWDO DSSVH[DPLQHGZLWKDSULYDF\SROLF\   apps that provide some form of access to a DQGSURYLGHVDEUHDNGRZQEHWZHHQWKHIUHH privacy policy, i.e. an applicable privacy policy and paid apps across three platforms: iOS App ZDVIRXQGRQWKHDSSOLVWLQJSDJHLQDSSRURQ Store, Google Play, and Kindle Fire Appstore. WKHGHYHORSHUpVZHEVLWH As the numbers indicate, more privacy policies Table 2 ZHUHIRXQGLQWKHVHYHQW\ILYHIUHHDSSVH[DPLQHG (69.3%) than in the seventy-five paid apps (53.3%). June 2012 Study – % of Top Apps that have a Privacy Policy This is not surprising as free apps are more Free Apps Paid Apps likely to have been required by an ad iOS – App Store 84% 64% QHWZRUNWRGLVFORVHWUDFNLQJSUDFWLFHVDQG LVFRQVLVWHQWZLWKSDVW)3)VXUYH\V Android – Google Play 76% 48% Kindle Fire – Kindle Appstore 48% 48% Table 1 All Platforms 69.3% 53.3% % of All % of Free % of Paid Apps with Apps with Apps with a Privacy a Privacy a Privacy Table 3 Policy Policy Policy Sept 2011 Study – % of Top Apps that have a Privacy Policy14 June 61.3% 69.3% 53.3% Free Apps Paid Apps 2012 iOS – App Store 40% 60% Android – Google Play 70% 30%

Compared to the September 2011 FPF Mobile Apps Survey, there is significant improvement across both the iOS App Store and Android Google Play Store over the last 8 months. The percentage of free apps ZLWKVRPHIRUPRIDFFHVVWRDSULYDF\SROLF\KDVGRXEOHG on the iOS App Store platform, from 40% to 84%. The SHUFHQWDJHRIIUHHDSSVZLWKDSULYDF\SROLF\RQWKH Google Play platform also improved, from 70% to 76%. The percentages of paid apps offering access to a privacy policy are not as substantial, but there is still marked LPSURYHPHQWZLWKLQWKH$QGURLG*RRJOH3OD\6WRUH7KH SHUFHQWDJHRISDLGDSSVZLWKVRPHIRUPRIDFFHVVWR a privacy policy increased from 30% to 48% on the Google Play platform. The iOS App Store percentage for SDLGDSSVLQFUHDVHGE\$OWKRXJK$PD]RQpV.LQGOH )LUH$SSVWRUHLVQHZWRWKHJDPHQHDUO\KDOIRIERWKWKH free and paid apps provide access to a privacy policy.

14 The previous study in September 2011 looked at the top ten free and ten paid apps across three platforms: iOS App Store, Google Android Market, and Black- berry (RIM). 3

C. Percentage of Apps with Access only been available since March 2011,17 expects to Privacy Policy at the App Store WRSURYLGHDSSGHYHORSHUVZLWKWKHFDSDELOLW\ of providing a link in an upcoming release in Listing Page WLPHWRFRPSO\ZLWKWKH&DOLIRUQLDDJUHHPHQW Table 4 As evidenced by Tables 1-4 above, app developers % of Top Apps with Access to Privacy DUHPDNLQJVLJQLILFDQWLPSURYHPHQWVWRZDUG Policy at App Listing Page FRPSO\LQJZLWK&DOLIRUQLDODZE\SRVWLQJSULYDF\ Free Apps Paid Apps policies. With the deadline approaching for the app SODWIRUPVWRUHFRQYHQHZLWKWKH&DOLIRUQLD$WWRUQH\ iOS – App Store 48% 28% *HQHUDOWRHYDOXDWHFRPSOLDQFHZLWK&DOLIRUQLDODZ Android – Google Play 20% 12% VXEVWDQWLDOSURJUHVVZLOOVWLOOEHUHTXLUHG18+RZHYHU Kindle Fire – Kindle Appstore 0% 0% DOORIWKHSODWIRUPVZKRMRLQHGWKH&DOLIRUQLD All Platforms 22.7% 13.3% Attorney General’s agreement have agreed to implement its requirements in the upcoming months. )3)H[SDQGHGWKHVWXG\WRH[DPLQHZKHWKHUWKH D. Percentage of Apps with In-App privacy policy is accessible at the app store listing page. In February 2012, the California Attorney Access to Privacy Policy *HQHUDODQQRXQFHGDQDJUHHPHQWZLWKPDMRUDSS 7DEOHVDQGUHIOHFWWKHSHUFHQWDJHRIDSSVZLWK platform providers. As part of this agreement, in-app access to a privacy policy. In-app access the app store companies agreed to create “either means a user can obtain information regarding the (a) an optional data field for a hyperlink to the use, collection, and sharing of information right app’s privacy policy or a statement describing IURPWKHDSSLWVHOIRUYLDDOLQNIURPZLWKLQWKHDSS the app’s privacy practices or (b) an optional Table 5 data field for the text of the app’s privacy policy or a statement describing the app’s privacy June 2012 Study – % of Apps with practices”15 at the app install page in order to In-App Access to Privacy Policy PDNHLWHDVLHUIRUFRQVXPHUVWRILQGDQGUHYLHZ Free Apps Paid Apps DQDSSpVSULYDF\SROLF\EHIRUHGRZQORDGLQJLW16 iOS – App Store 60% 44% Table 4 illustrates the percentage of apps evaluated Android – Google Play 64% 24% in some of the platforms that have already Kindle Fire – Kindle 20% 28% responded to the California Attorney General’s call Appstore by providing accessibility to privacy information All Platforms 48% 32% prior to install at the app store listing page. Access to a privacy policy at the listing page (via Table 6 hyperlink or other form of access) is important Sept 2011 Study – % of Top Apps with EHFDXVHLWDOORZVFRQVXPHUVWRXQGHUVWDQGKRZ In-App Access to Privacy Policy DQDSSZLOOXVHLQIRUPDWLRQEHIRUHPDNLQJWKH decision to purchase and/or install the app. Free Apps Paid Apps iOS- App Store 40% 40% As Table 4 reflects, 48% of the free apps and 28% of paid apps in the iOS App Store have a privacy Android- Google Play 50% 10% policy directly accessible on the listing page. 20% of free apps and 12% of paid apps on Google Play provide access to a privacy policy on the listing SDJH$PD]RQpV.LQGOH)LUH$SSVWRUHKDYLQJ

15 http://oag.ca.gov/news/press-releases/attorney-general-kamala-d-harris-secures-global-agreement-strengthen-privacy CA AG Mobile Apps Market Compa- nies “must provide a way for users to report non-compliance” and “implement a process for responding to reported instances of non-compliance.” 16 $GGLWLRQDOO\WKHDJUHHPHQWUHTXLUHVWKHDSSVWRUHFRPSDQLHVWRSURYLGHXVHUVDZD\WRUHSRUWWRWKHVWRUHZKHQDQDSSLVQRWFRPSO\LQJZLWKWKHWHUPVRIVHU - vice. 17 KWWSWHFKFUXQFKFRPDPD]RQDQGURLGDSSVWRUH 18 http://oag.ca.gov/news/press-releases/attorney-general-kamala-d-harris-secures-global-agreement-strengthen-privacy 4

June 2012 FPF Mobile Apps Study

7KH)3)VWXG\UHYHDOHGWKDWRIWKHWRSWZHQW\ILYH F. Number of Apps that ask free apps in the iOS App Store, Google Play, and for Permission to Access Kindle Fire Appstore, approximately 48% made the privacy policy accessible in the app itself or via a Location that have a Privacy Policy ZHEOLQNIURPWKHDSS7KHUHKDVEHHQVLJQLILFDQW $SSSODWIRUPVGLUHFWO\LQIRUPFRQVXPHUVZKHQ improvement across all platforms over the past apps request location. The Android device HLJKWPRQWKV7KHIUHHDSSVDJDLQVKRZD displays a request for GPS or “fine” location20 JUHDWHULPSURYHPHQWZLWKWKHL26$SS6WRUH in the Google Play permissions screen prior to growing by 20% and the Google Play Store LQVWDOODQGL26DSSVGLVSOD\DSRSXSRSWLQ growing by 14%7KHSDLGDSSVZLWKLQDSS consent mechanism the first time a user accesses access to the privacy policy have also improved, an app.21 But it is particularly important for apps ZLWKWKHL26$SS6WRUHLPSURYLQJE\4% and that collect precise location to have a privacy the Google Play Store improving by 14%. SROLF\WRH[SODLQZK\WKHDSSLVDFFHVVLQJ ORFDWLRQZKHWKHULWVKDUHVORFDWLRQLQIRUPDWLRQ E. Percentage of Apps that have ZLWKWKLUGSDUWLHVDQGKRZORQJLWNHHSVWKHGDWD a Privacy Policy only on the )3)H[DPLQHGZKHWKHUWKHDSSVWKDWDFFHVVHG Developer’s Website precise location data had a privacy policy.22 7DEOHEHORZLOOXVWUDWHVWKHQXPEHURIDSSVWKDW Table 8 KDYHDSULYDF\SROLF\RQWKHGHYHORSHUpVZHEVLWH Android – Google Play: Apps that Access ZKHUHDFFHVVWRDSULYDF\SROLF\ZDVQRWIRXQGRQ Precise Location that have a Privacy Policy WKHOLVWLQJSDJHRUIURPZLWKLQWKHDSS19 For these Free Apps Paid Apps DSSVFRQVXPHUVZRXOGKDYHWRKXQWWKHZHELQRUGHU 23 24 to find the applicable privacy – sometimes having to # of Apps that 7/25 7/25 search for the identity of the app’s corporate parent $FFHVV/RFDWLRQ to find the necessary information. Still, the information ZLWK3ULYDF\3ROLF\ 6/7 4/7 could be found and these apps have ensured that they are legally accountable for their practices. Table 9 Table 7 iOS – App Store: Apps that Access Precise Location that have a Privacy Policy Apps that have privacy policy only on the website Free Apps Paid Apps (not available at listing page and/or in-app) # of Apps that 8/2525 4/2526 Free Apps Paid Apps $FFHVV/RFDWLRQ RI$SSVZLWKRXW 36/75 50/75 ZLWK3ULYDF\3ROLF\ 7/8 3/4 access to a Privacy Policy on the listing $VWKHDERYHWDEOHVUHIOHFWWZHOYHRXWRIWKHILIW\ page and/or in-app apps surveyed on the iOS App Store platform RI$SSVZLWKD3ULYDF\ 13/36 = 36.1% 14/50 = 28% requested precise location information and Policy only on the WHQRXWRIWKRVHWZHOYHKDGSULYDF\SROLFLHV GHYHORSHUpVZHEVLWH Fourteen out of the fifty apps surveyed on the Google Play platform requested precise location information and ten out of those fourteen had privacy policies. The study revealed that almost all of the leading apps requesting precise location data did have a privacy policy in place, but found WKDWVRPHYHU\ZHOONQRZQDSSVGLGQRW

19 Where the privacy policy clearly indicated that the policy was meant to cover only the website and made no reference to mobile applications or other “services,” FUHGLWZDVQRWJLYHQWRZDUGVKDYLQJDQDSSOLFDEOHSULYDF\SROLF\6HH([KLELWIRUIXUWKHUGHWDLOVRQZKLFKZHEVLWHVZHUHQRWGHHPHGDGHTXDWH 20 *RRJOH3OD\DOVRVHSDUDWHVORFDWLRQLQWRWZRFDWHJRULHVFRDUVH QHWZRUNEDVHGHJ&HOO,':L)LSRVLWLRQLQJ DQGðQH HJ*36 7DEOHUHñHFWVRQO\WKRVH DSSVXVLQJðQHORFDWLRQEHFDXVHFRDUVHORFDWLRQLVQRWDVDFFXUDWHRUSUHFLVH1HYHUWKHOHVVLWVKRXOGEHQRWHGWKDWWKHUHDUHHLJKWDSSVXVLQJRQO\FRDUVH ORFDWLRQDQGRIWKRVHHLJKWðYHKDYHDSULYDF\SROLF\DYDLODEOH7KHðYHDSSVZLWKSULYDF\SROLFLHVZHUH7XQH,Q5DGLR3UR$QJU\%LUGV6SDFH6N\SH$QJU\ %LUGVDQG*26063URDQGWKHWKUHHWKDWGLGQRWKDYHSROLFLHVZHUH&XWWKH5RSH)UXLW1LQMDDQG)UXLW1LQMD)UHH 21 The Kindle Fire does not contain a GPS system. However, it should be noted that some apps in the Kindle Fire Appstore use location using Wi-Fi. http://www. readwriteweb.com/archives/skyhook_brings_location-based_services_to_the_kind.php 22 While FPF did not fully examine content of the privacy policy, a comprehensive privacy policy would elaborate on how and why location data is used and the OHQJWKRIWLPHLWLVOLQNHGWRWKHXVHUâVLGHQWLðHU3UHFLVHORFDWLRQGDWDFDQEHFRQVLGHUHGVHQVLWLYHSHUVRQDOLQIRUPDWLRQSDUWLFXODUO\ZKHQPDLQWDLQHGRYHUWLPH and/or combined with other user data. 23 The Google Play Free apps with a privacy policy are: Facebook, Instagram, Twitter, WhatsApp Messenger, and Weather Channel. The app that did not have a privacy policy is: . 24 7KH*RRJOH3OD\3DLGDSSVZLWKDSULYDF\SROLF\DUH%HDXWLIXO:LGJHWV6RXQG+RXQG:HDWKHU%XJ(OLWHDQG6KD]DP(QFRUH7KHDSSVWKDWGLGQRWKDYHD privacy police are: Camera ZOOM FX, Star Chart, and Smart Tools. 25 7KHL26$SS6WRUHIUHHDSSVZLWKDSULYDF\SROLF\DUH7KH:HDWKHU&KDQQHO*RRJOH6HDUFK*RRJOH(DUWK6KD]DP0RYLHVE\)OL[WHUZLWK5RWWHQ7RPDWRHV %XPSDQG*URXSRQ7KHDSSWKDWGLGQRWKDYHDSULYDF\SROLF\LV)UXLW1LQMD/LWH 26 The iOS Apps Store paid apps with a privacy policy are: MotionX GPS Drive, and I Am T-Pain 2.0. The app that did not have a privacy policy is: Camera+. 5

Top Google Play apps G. Easy To Read Notice that collected location but that did not provide an A small number of apps have started to include a accessible privacy policy short form notice - a method of enhanced notice 27 using a limited number of characters to convey included Cut the Rope, 29 Camera ZOOM FX, Star key data collection and use practices to the user. Chart, and Smart Tools. A hyperlink to the full detailed privacy policy is Top iOS apps missing XVXDOO\SURYLGHGZLWKLQWKHVKRUWIRUPQRWLFH SROLFLHVZHUH)UXLW1LQMD Short form notice can be better for consumers /LWHDQG&DPHUD because it is easier and quicker to read than the entire privacy policy, especially on a small It should be noted that device, such as a smart phone. In this study, only FPF reached out to six apps across all three platforms used a short these app developers IRUPQRWLFHDFFHVVLEOHIURPZLWKLQWKHDSS$OO WRFRQILUPZKHWKHU six apps have the same developer, Zynga.30 they had an accessible privacy policy and inquired about their location data use practices. In response, Camera ZOOM FX’s app developer, AndroidSlide disclosed that qORFDWLRQGDWDLVRQO\XVHGLIWKHXVHUVZLWFKHV WKLVRSWLRQRQWRDOORZWKHPWRUHFRUG*36GDWD ZLWKWKHSKRWRVWDNHQLQWKHDSS7KLVLVIDLUO\ standard for all camera apps” and that, “no location LQIRUPDWLRQLVVKDUHGr:HUHFRJQL]HWKDWVRPH apps are accessing location simply to provide XVHUVZLWKDXVHIXOVHUYLFHDQGWKDWRWKHUVPD\ EHSURYLGLQJWKHGDWDWRDGQHWZRUNVWRSURYLGH JHRJUDSKLFDOO\WDUJHWHGDGYHUWLVLQJ%XWZLWKRXW DSULYDF\SROLF\XVHUVKDYHQRZD\RINQRZLQJ ZKHWKHUDUHFRUGRIWKHLUSUHFLVHZKHUHDERXWVLV PDLQWDLQHGRYHUWLPHRUVKDUHGZLWKWKLUGSDUWLHV Star Chart’s app developer, Escapist Games, indicated that they had a privacy SROLF\+RZHYHU)3) did not credit them for having a privacy policy in the study because there ZDVQROLQNWRLWIURPWKH Google Play or iOS app store, from the app itself RUIURPWKHLUZHEVLWHKRPH page.28 The privacy policy, ZKLFKWKH\VHQWWRXVDQGDGYLVHGLVDYDLODEOHYLD DOLQNIURPWKH:LQGRZVDSSVWRUHGLGLQGLFDWH that they do not share location information.

27 1RWHWKDW&XWWKH5RSHâVGHYHORSHURQ$QGURLG=HSWR/DEKDVDSULYDF\SROLF\WKDWLVRQO\DSSOLFDEOHWRWKHLUZHEVLWHDQGPDNHVQRPHQWLRQRIRWKHUVHUYLFHVRU use of location data. 28 Website last viewed on July 5, 2012: http://www.escapistgames.com/ 29 http://www.ftc.gov/privacy/glbact/glboutline.pdf 30 The Zynga apps are: Words With Friends (free and paid versions), Draw Something (free and paid versions), and Scramble With Friends (only the free version was DQDO\]HGLQWKLVVWXG\  6

June 2012 FPF Mobile Apps Study

IV. METHODOLOGY V. RESOURCES In June 2012, FPF researchers selected Future of Privacy Forum Application WZHQW\ILYHIUHHDQGWZHQW\ILYHSDLGDSSVIURP Privacy Site each of the three app store platforms: iOS App Store, Google Play, and the Kindle Appstore. )3)pVZHEVLWHOLVWVUHDGLO\DYDLODEOHSULYDF\IRUZDUG (DFKDSSZDVGRZQORDGHGIURPWKHUHVSHFWLYH resources and tools for app developers interested store. Researchers examined the app listing page in preserving their users’ privacy. Resources for a hyperlink to the privacy policy, installed the are available for a range of platforms, including DSSVDQGVHDUFKHGZLWKLQHDFKDSSWRGHWHUPLQH )DFHERRNDQGRWKHUVRFLDOQHWZRUNV26GHYHORSHUV ZKHWKHUWKHUHZDVLQDSSDFFHVVWRDSULYDF\SROLF\ and manufacturers, third party app stores, operators such as AT&T, and Smart Grid and home platforms. The fifty apps examined through the iOS App 6WRUHZHUHGRZQORDGHGRQDQL3KRQH*6DQG www.applicationprivacy.org ZHUHVHOHFWHGEDVHGRQWKHWRSDSSVRIDOOWLPH released by Apple on March 3, 2012.31 The fifty PrivacyChoice Mobile Resources DSSVDQDO\]HGRQWKH*RRJOH3OD\VWRUHZHUH 3ULYDF\&KRLFHSURYLGHVJXLGDQFHRQKRZWR GRZQORDGHGRQDQ$QGURLG6DPVXQJ1H[XV build an app privacy policy for app developers 6GHYLFH)3)VHOHFWHGWKHWRSWZHQW\ILYH including resources, tools and code. 32 non-Google free and paid apps from the www.privacychoice.org store on June 5, 2012. The fifty apps surveyed RQWKH.LQGOH$SSVWRUHGRZQORDGHGRQD TRUSTe Mobile Privacy Solutions .LQGOH)LUHZHUHEDVHGRQWKHVWRUHpVWRS free and paid apps on June 5, 2012. TRUSTe is a privacy solutions provider offering several privacy services across many ,QWKLVVWXG\RQFHWKHDSSZDVGRZQORDGHG channels, including mobile applications UHVHDUFKHUVGHWHUPLQHGLIWKHUHZDVDQ\DFFHVVWR and privacy policy generators. WKHSULYDF\SROLF\ZLWKLQWKHDSSLWVHOI,IDSULYDF\ SROLF\ZDVIRXQGDWWKHOLVWLQJSDJHLQWKHDSSVWRUH www.truste.com RUZLWKLQWKHDSSLWVHOIWKHDSSZDVFUHGLWHGZLWK Mobile Marketing Association Mobile having a privacy policy. If the researcher did not ILQGDSULYDF\SROLF\DWWKHOLVWLQJSDJHRUZLWKLQWKH Application Privacy Policy Framework DSSLWVHOIDVHDUFKZDVFRQGXFWHGWRGHWHUPLQH MMA’s privacy guidelines for app ZKHWKHUWKHGHYHORSHUKDGDZHEVLWHDQGZKHWKHU developers provide best practices and WKHZHEVLWHKDGDQDSSOLFDEOHSULYDF\SROLF\,I sample language for privacy policies. WKHDSSGHYHORSHUpVZHEVLWHKDGDSULYDF\SROLF\ www.mmaglobal.com/bestpractice WKDWRQO\PDGHUHIHUHQFHWRWKHZHEVLWHDQGGLG not make any mention of other “services,” FPF IPC Ontario Privacy By Design did not give credit for having a privacy policy. IPC Ontario provides guidance and resources FPF researchers note additional points regarding surrounding the privacy by design approach. WKHPHWKRGRORJ\$OWKRXJKWKHDSSVZHUH GRZQORDGHGWKHDSSVWKHPVHOYHVZHUHQRWWHVWHG www.ipc.on.ca/english/Privacy/ IRUZKHWKHUWKH\ZHUHFRPSO\LQJZLWKWKHSULYDF\ Introduction-to-PbD/ policies, terms of use, or notification practices.

31 http://www.macstories.net/news/apple-reveals-new-all-time-top-apps-following-25-billion-downloads/ 32 Excluded were apps developed by Google that were listed in the Google Play store to make the study more consistent (as we did not examine Apple apps on iOS DQG$PD]RQDSSVRQ.LQGOH)LUH $OVRH[FOXGHGZHUHWKUHHSDLGDSSVWKDWUHTXLUHGXVHUVWRìURRWúWKHLUGHYLFH7LWDQLXP%DFNXS3UR.H\5200DQDJHU5RRW Explorer (File Manager). 7

EXHIBIT 1: FREE APPS No. Name of App Developer Is there Is there If No Access from Privacy Policy URL access to a In-App access Listing page or Privacy Policy to a Privacy In-App Access, or link on the Policy? is there a Privacy App Store Policy on the Listing Page? developer’s website? $33/( APP STORE 1 Facebook Facebook, Inc. no yes n/a 2 Pandora Radio Pandora Media, Inc. no yes* n/a ZZZSDQGRUDFRPSULYDF\ 3 :RUGVZLWK Zynga yes yes n/a FRPSDQ\]\QJDFRPDERXW Friends Free privacy-center/privacy-policy 4 Skype 6N\SH6RIWZDUH6DUO yes* no n/a ZZZVN\SHFRPLQWOHQXV legal/privacy/general/ 5 The Weather The Weather yes* yes n/a ZZZZHDWKHUFRPFRPPRQ Channel Channel Interactive home/privacy.html 6 Google Search Google, Inc. yes* yes n/a m.google.com/privacy 7 Google Earth Google, Inc. yes* yes n/a m.google.com/privacy 8 Free 5RYLR0RELOH/WG yes* yes n/a ZZZURYLRFRPSULYDF\ 9 6KD]DP 6KD]DP yes yes n/a (QWHUWDLQPHQW/WG 10 Netflix Netflix, Inc. yes* no n/a account.netflix.com/PrivacyPolicy 11 Paper Toss Backflip Studios no no yes ZZZEDFNIOLSVWXGLRVFRP support/privacy-policy-3 12 7ZLWWHU 7ZLWWHU,QF no yes n/a 13 Movies by Flixter Flixter no yes n/a ZLWK5RWWHQ Tomatoes 14 Bump Bump Technologies, no yes n/a Inc. 15 3$&0$1/LWH 1DPFR1HWZRUNV no no yes namcobandaigames.com/ America Inc. company/privacy 16 Flighlight. John Haney no no no 17 Unblock Me FREE .LUDJDPHV&R/WG no no no 18 Temple Run ,PDQJL6WXGLRV//& no no no 19 Instagram Burbn, Inc. no yes n/a 20 Touch Hockey: FS5 FlipSide5, Inc. no no yes ZZZIOLSVLGHFRPFRPSDQ\SULYDF\ 21 $QJU\%LUGV/LWH Clickgamer.com yes* yes n/a ZZZURYLRFRPSULYDF\ 22 ESPN ScoreCenter ESPN Inc. yes* yes n/a 23 )UXLW1LQMD/LWH Halfbrick Studios no no no 24 Groupon Groupon, Inc. yes* no n/a ZZZJURXSRQFRPSULYDF\ 25 Angry Birds 5RYLR0RELOH/WG yes* yes n/a ZZZURYLRFRPSULYDF\ Rio Free 12/25 = 48% 15/25 = 60% 3/7 = 42.8% *22*/(3/$< 1 Facebook Facebook no yes n/a 2 Pandora Internet Pandora no yes* n/a Radio 3 Instagram Instagram no yes n/a 4 100 Floors Tobi Apps no no no 5 Temple Run Imangi Studios no no no 6 5RYLR0RELOH/WG yes* yes* n/a ZZZURYLRFRPSULYDF\ 7 Skype Skype no no yes ZZZVN\SHFRPLQWOHQXV legal/privacy/general/ 8 7ZLWWHU 7ZLWWHU,QF no yes n/a 9 Cut the Rope =HSWR/DE no no no** KWWSZZZFXWWKHURSHLHSULYDF\KWPO 10 Netflix Netflix, Inc. yes* no n/a account.netflix.com/PrivacyPolicy 11 Slacker Radio Slacker Inc. no no yes ZZZVODFNHUFRPFRPSDQ\SROLFLHVMVS 12 Angry Birds 5RYLR0RELOH/WG yes* yes* n/a ZZZURYLRFRPSULYDF\ 13 Color Splash Androidslide no no no 14 Kindle $0=10RELOH//& no yes* n/a ZZZDPD]RQFRPJSKHOS customer/display.html/ref=footer_ privacy?ie=UTF8&nodeId=468496 15 'UDZ6RPHWKLQJ OMGPOP yes yes n/a Free 16 Fruit Ninja Free Halfbrick Studios no no no 17 Whatsapp Whatsapp Inc. no yes n/a Messenger 18 Zedge Zedge no yes yes ZZZ]HGJHQHWDQGURLG ZZZ"S SULYDF\SROLF\ 19 /RRNRXW6HFXULW\ /RRNRXW0RELOH no yes* n/a ZZZP\ORRNRXWFRPPSULYDF\ Security 20 Weather Channel The Weather Channel no yes n/a 21 GO SMS Pro Go Dev Team no yes n/a 22 :RUGVZLWK Zynga yes* yes n/a FRPSDQ\]\QJDFRPDERXW Friends Free privacy-center/privacy-policy 23 Basketball Shoot Runnergames no no no 24

June 2012 FPF Mobile Apps Study

Exhibit 1: Free Apps (continued)

No. Name of App Developer Is there access Is there If No Access from Privacy Policy URL to a Privacy In-App access Listing page or Policy or link to a Privacy In-App Access, on the App Policy? is there a Privacy Store Listing Policy on the Page? developer’s website? .,1'/(),5( APPSTORE 1 Spelling Bee 6RFUDWLFD//& YLD no no no $PD]RQ'LJLWDO Services, Inc. [ADS]) 2 Temple Run Imangi Studios, no no no //& YLD$'6 3 )LUHZRUNV$UFDGH Big Duck Games no no no //& YLD$'6 4 6FUDPEOHZLWK Zynga Game no no yes FRPSDQ\]\QJDFRPDERXW Friends Free 1HWZRUN YLD$'6 privacy-center/privacy-policy 5 0DJLF3X]]OHV Ximad, Inc. (via ADS) no no yes ZZZ[LPDGFRPSROLF\ 6 'UDZ6RPHWKLQJ Zynga Game no no yes FRPSDQ\]\QJDFRPDERXW 1HWZRUN YLD$'6 privacy-center/privacy-policy 7 Netflix Netflix, Inc. (via ADS) no no yes https://signup.netflix.com/PrivacyPolicy 8 Kaleidoscope Bejoy Mobile no no no 'UDZLQJ3DG (via ADS) (Kindle Fire Edition) 9 Monster Shooter Gamelion Studios no no no** KWWSZZZJDPHOLRQFRPSULYDF\SKS (via ADS) 10 Style Me Girl )UHQ]RR YLD$'6 no no yes megirl.com 11 Angry Birds Free no yes* n/a ZZZURYLRFRPSULYDF\ /WG YLD$'6 12 Monster Pack .LZNL,QF YLD$'6 no yes* n/a KWWSNLZLXSFRPSULYDF\KWP 13 Fruit Ninja Free Halfbrick Studios no no no 3W\/WG YLD$'6 14 Word Search Fun More Funner no no no 6RIWZDUH YLD$'6 15 Solitaire Mobility Ware no yes* n/a ZZZPRELOLW\ZDUHFRPSULYDF\SKS (via ADS) 16 Calculator Plus Free Digitalchemy, no no no (Kindle Fire Edition) //& YLD$'6 17 Where’s My Disney (via ADS) no yes* n/a http://corporate.disney.go.com/ Water Free corporate/pp.html 18 Deer Hunter Glu Mobile, Inc. no no yes ZZZJOXFRPSULYDF\ Reloaded (via ADS) 19 Virtual Makeover Mary Kay, Inc. no no no** ZZZPDU\ND\FRPSULYDF\VWDWHPHQWDVS[ (via ADS) 20 Bubble Blaster SkitApps (via ADS) no no no 21 Mood Scanner Mister Borken no no no (via ADS) 22 Angry Birds Rovio Entertainment no yes* n/a ZZZURYLRFRPSULYDF\ Seasons Free /WG YLD$'6 23 /HWpV%RZO SideBUMP Studios no no no (via ADS) 24 Baby Adopter [/LQHFRP//& no no no (via ADS) 25 -HZHOV MHGames (via no no yes ZZZPKJDPHVRUJSULYDF\SROLF\ $PD]RQ 0/25 = 0% 5/25 = 20% 7/20 = 35%

727$/6 17/75 = 22.7% 36/75 = 48% 13/36 = 36.1% *Hyperlink is SURYLGHGZKLFK redirects to privacy SROLF\YLDZHE EURZVHUSDJH **Privacy policy did not cover mobile apps Note: A question ZDVFRQVLGHUHGQRW DSSOLFDEOHZKHQ WKHIXOOWH[WRI}D SULYDF\SROLF\ZDV SURYLGHGZLWKLQ the permissions SDJHRULQ}DSS Note: some of these apps might have different developers on different platforms. 9

EXHIBIT 2: PAID APPS No. Name of App Developer Is there Is there If No Access from Privacy Policy URL access to a In-App access Listing page or Privacy Policy to a Privacy In-App Access, or link on the Policy? is there a Privacy App Store Policy on the Listing Page? developer’s website? $33/( APP STORE 1 Angry Birds Clickgamer.com yes* yes* n/a ZZZURYLRFRPSULYDF\ 2 Fruit Ninja Halfbrick Studios no no no 3 /LPD6N\ no no no 4 Cut the Rope &KLOOLQJR/WG no yes* n/a tos.ea.com/legalapp/ (acquired by :(%35,9$&<86HQ3& Electronic Arts in 2010) 5 Angry Birds 5RYLR0RELOH/WG yes* yes* n/a ZZZURYLRFRPSULYDF\ Seasons 6 :RUGVZLWK)ULHQGV Zynga Mobile yes yes* n/a FRPSDQ\]\QJDFRPDERXW privacy-center/privacy-policy 7 Tiny Wings Andreas Illiger no no no 8 Angry Birds Rio 5RYLR0RELOH/WG yes* yes* n/a ZZZURYLRFRPSULYDF\ 9 no no no** ZZZEROWFUHDWLYHFRPSULYDF\SROLF\ 10 &DPHUD WDSWDSWDS//& no no no 11 The Moron Test DistinctDev, Inc. no no no 12 Plants vs. Zombies PopCap (note: this is no yes* n/a tos.ea.com/legalapp/ DWUDGHPDUNRZQHG :(%35,9$&<86HQ3& by Electronic Arts) 13 Skee-Ball Freeverse, Inc. no no yes ZZZQJPRFRFRPSULYDF\SKS 14 7KH*DPHRI/LIH Electronic Arts yes* no n/a ZZZHDFRPSULYDF\SROLF\ 15 Scrabble Electronic Arts yes* yes* n/a tos.ea.com/legalapp/ :(%35,9$&<86HQ3& 16 Monopoly Electronic Arts yes* yes* n/a tos.ea.com/legalapp/ :(%35,9$&<86HQ3& 17 FatBooth Pivi & Co. no yes* n/a ZZZSLYLDQGFRFRPSULYDF\BSROLF\KWPO 18 WhatsApp WhatsApp Inc. no yes* n/a ZZZZKDWVDSSFRPOHJDO3ULYDF\ Messenger 19 UNO Gameloft no no no** ZZZJDPHORIWFRPSULYDF\QRWLFH 20 Color Splash Pocket Pixels Inc. no no yes http://getsatisfaction.com/corp/ ZHEVLWHSULYDF\SROLF\ 21 The Sims 3 Electronic Arts no yes* n/a tos.ea.com/legalapp/ :(%35,9$&<86HQ3& 22 Flight Control )LUHPLQW3W\/WG no no no 23 MotionX GPS Drive )XOOSRZHU no no yes ZZZPRWLRQ[FRPKRPHSULYDF\SROLF\ Technologies, Inc. 24 Where’s Waldo? /XGLD no no no** KWWSZZZOXGLDFRPHQSULYDF\SKS The Fantastic Journey 25 I am T-Pain 2.0 Smule, Inc. no no yes ZZZVPXOHFRPSULYDF\ 7/25 = 28% 11/25 = 44% 4/13 = 30.8% *22*/(3/$< 1 Cut the Rope =HSWR/DE no no no** ZZZ]HSWRODEFRPSSKWP 2 Beautiful Widgets /HYHO8S6WXGLR no no yes levelupstudio.com/privacy-policy 3 'UDZ6RPHWKLQJ OMGPOP yes* yes* n/a FRPSDQ\]\QJDFRPDERXW privacy-center/privacy-policy 4 6ZLIW.H\; 7RXFKW\SH/WG yes* yes* n/a ZZZVZLIWNH\QHWSULYDF\ Keyboard 5 Angry Birds 5RYLR0RELOH/WG yes* yes* n/a ZZZURYLRFRPSULYDF\ Space Premium 6 Where’s My Water? Disney no yes* n/a corporate.disney.go.com/ corporate/pp.html 7 Rebuild 6DUDK1RUWKZD\ no no no 8 3RZHUDPS)XOO 0$;03 065/WG no no no Version Unlocker 9 Minecraft - Mojang no no yes ZZZPLQHFUDIWQHWWHUPV Pocket Edition 10

June 2012 FPF Mobile Apps Study

Exhibit 2: Paid Apps (continued)

No. Name of App Developer Is there Is there In-App If No Access Privacy Policy URL access to a access to a from Listing Privacy Policy Privacy Policy? page or In-App or link on the Access, is there a App Store Privacy Policy on Listing Page? the developer’s website? *22*/(3/$< 10 Osmos HD Hemisphere Games no no no 11 Camera ZOOM FX AndroidSlide no no no 12 TuneIn Radio Pro TuneIn no yes* n/a tunein.com/policies/privacy/ 13 Tapatalk Forum App Quoord Systems no no yes tapatalk.com/privacy.php /LPLWHG 14 SoundHound SoundHound Inc. no no yes ZZZVRXQGKRXQGFRPLQGH[ php?action=s.privacy_policy 15 Fruit Ninja Halfbrick Studios no no no 16 Cogs /D]\6WXGLRV no no no 17 Paper Camera -)'3/DEV no no no 18 WeatherBug Elite WeatherBug by no no yes ZHDWKHUZHDWKHUEXJFRPDERXW (DUWK1HWZRUNV us/privacy-policy.html 19 Star Chart Escapist Games no no no /LPLWHG 20 Smart Tools Smart Tools Co. no no no 21 /RJR4XL])XOO Meeyo no no no 22 )OLFN*ROI Full Fat no no no 23 Doodle Jump Gamehouse no no yes ZZZUHDOQHWZRUNVFRP privacy-policy/index.aspx 24 6KD]DP(QFRUH 6KD]DP(QWHUWDLQPHQW no yes n/a 25 N.O.V.A. 3 - Gameloft no no no** ZZZJDPHORIWFRPSULYDF\QRWLFH Near Orbit 3/25 = 12% 6/25 = 24% 6/19 = 31.6% .,1'/(),5( APPSTORE 1 Angry Birds Rovio Entertainment no yes* n/a ZZZURYLRFRPSULYDF\ Space HD (Kindle /WG YLD$'6 Fire Edition) 2 Cut the Rope Zeptolabs (via ADS) no no no** ZZZ]HSWRODEFRPSSKWP 3 7KH/RJRV4XL] (GJH:D\6RIWZDUH no no no (Kindle Fire Edition) (via ADS) 4 Where’s My Water? Disney (via ADS) no yes* n/a corporate.disney.go.com/corporate/pp.html 5 Angry Birds Rio Rovio Entertainment no yes* n/a ZZZURYLRFRPSULYDF\ (Ad-Free) /WG YLD$'6 6 Plants v. Zombies PopCap Games, no no yes http://tos.ea.com/legalapp/ (Kindle Fire Edition) Inc. (via ADS) :(%35,9$&<86HQ3& 7 Where’s Waldo Gameloft (via ADS) no no no** ZZZJDPHORIWFRPSULYDF\QRWLFH 1RZ" .LQGOH Fire Edition) 8 Cut the Rope: Zeptolabs (via ADS) no no no** ZZZ]HSWRODEFRPSSKWP Experiments 9 6&5$%%/( .LQGOH Electronic Arts, no yes* n/a ZZZHDFRPSULYDF\SROLF\ Fire Edition) Inc. (via ADS) 10 Dr. Jekyll and ANUMAN no no no Mr. Hyde: The INTERACTIVE Strange Case - (via ADS) Extended Edition 11 UNO (Kindle Gameloft (via ADS) no no no** ZZZJDPHORIWFRPSULYDF\QRWLFH Fire Edition) 12 Doodle Jump 5HDO1HWZRUNV no no yes ZZZUHDOQHWZRUNVFRP (Kindle Fire Edition) Inc (via ADS) privacy-policy/index.aspx 13 SpongeBob Tickler Nickelodeon (via ADS) no no yes ZZZQLFNFRPLQIRSULYDF\SROLF\KWPO 14 Phase 10 Magmic, Inc. (via ADS) no no no** http://magmic.com/privacy 15 Bloons TD 4 Digital Goldfish no no no (via ADS) 16 Rain App Pixel Delight no no no Studios (via ADS) 17 %HMHZHOHG Electronic Arts, no yes* n/a ZZZHDFRPSULYDF\SROLF\ Inc. (via ADS) 18 'UDZ6RPHWKLQJ OMGPOP (via ADS) no no yes KWWSVFRPSDQ\]\QJDFRPDERXW (Kindle Fire Edition) [Zynga bought privacy-center/privacy-policy OMGPOP] 11

Exhibit 2: Paid Apps (continued)

No. Name of App Developer Is there Is there In-App If No Access Privacy Policy URL access to a access to a from Listing Privacy Policy Privacy Policy? page or In-App or link on the Access, is there a App Store Privacy Policy on Listing Page? the developer’s website? .,1'/(),5( APPSTORE 19 Angry Birds Rovio Entertainment no yes* n/a ZZZURYLRFRPSULYDF\ Seasons (Ad-Free) /WG YLD$'6 20 The Moron Test DistinctDev, Inc. no no no (via ADS) 21 &URVVZRUG 7HD]HO/LPLWHG no no no (via ADS) 22 The Mystery of Mediacity Games no no no** ZZZPHGLDFLW\JDPHVFRPMSULYDF\ Crimson Manor (via ADS) 23 Angry Birds Rovio Entertainment no yes* n/a ZZZURYLRFRPSULYDF\ (Ad-Free) /WG YLD$'6 24 Fruit Ninja Halfbrick Studios no no no 3W\/WG YLD$'6 25 PAC-MAN NAMCO BANDAI no no yes Games Inc. (via ADS) 0/25 = 0% 7/25 = 28% 5/18 = 27.8%

727$/6 10/75 = 13.3% 24/75 = 32% 15/50 = 30%

*Hyperlink is SURYLGHGZKLFK redirects to privacy SROLF\YLDZHE EURZVHUSDJH **Privacy policy did not cover mobile apps Note: A question ZDVFRQVLGHUHGQRW DSSOLFDEOHZKHQ WKHIXOOWH[WRI}D SULYDF\SROLF\ZDV SURYLGHGZLWKLQ the permissions SDJHRULQ}DSS Note: some of these apps might have different developers on different platforms. INSIDE BACK COVER BACK COVER

ZZZIXWXUHRISULYDF\RUJ