Hey, You, Get off My Private Data - Do Apps Respect Your Privacy as They Claim?

This talk presents a framework for assessing whether mobile apps’ data handling matches their privacy claims. It covers data protection regulations, app data flows, and testing methods, with a demonstration and recommendations.

Syllabus

Introduction
Outline
About us
Data Protection Regulations
GDPR Principles
GDPR vs Other Regulations
Google Play Privacy Policy
Personal and Sensitive Information
Google Privacy Policy
Framework
Motivation
Global view
Logic level
Data lifecycle
Exit points
Network request
Policy difference
Whats next
Automatic tools
Typical privacy information
Static field mounting
Demo
Testing
Recommendations