/SDK-Privacy-Report

Privacy details of SDKs for Apple Privacy Nutrition & Google Safety Section disclosure.

MIT LicenseMIT

SDK-Privacy-Report

This repository is a community maintained & sourced documentation of privacy details of popular SDKs. Details include data collected/shared, purposes, tracking details which app developers can use to fill the privacy forms for Apple Privacy Nutrition & Google Safety Section.

Overview

As a part of iOS 14 update, Apple made it mandatory for app developers to disclose privacy details of their apps, termed as Apple Privacy Nutritional Labels. Google also launched a similar app privacy disclosure requirement termed as Google Safety Section. Both of these initiatives benefit consumers to easily see the privacy overview of an app before using it. While app developers know what data they collect, for third party SDKs it requires them to read multiple documentation, ask questions and spend a lot of time to know what to fill. This project is an attempt to save that time by creating a centralized documentation of privacy detail of all SDKs. We are starting with 24 SDKs with a goal to keep increasing the list and encourage the community to contribute to it.

Repository Structure

We have a CSV file and a Readme file for SDK privacy details of Apple & Google. For Apple, there is more documentation and we have relied on official documentation to create this list. For Google, we have used the documentation released for apple privacy labels to create this and will be updating as more google specific documentation is released by companies. We have added a value of 'draft' where we are not sure based on official documentation and would be getting in touch with SDK owners and rely on community support to help us.

SDK Privacy Report for Apple:

SDK Data Types Collected Linked to User Identity Used for Tracking Purposes Source
Name of the SDK Data types as defined by Apple Yes/No based on linking Yes/No based on tracking Purposes as defined by Apple Source of this information
Firebase Analytics User ID Yes No Analytics

SDK Privacy Report for Android

Google Data Safety Section will become mandatory in Feb'22. SDKs have not released official documentation yet and we have used their documentation for Apple Privacy Nutrition to create this. Few things to note:

  1. Required/Optional Data: Depends on Opt-in(Consent) or Opt-Out if implemented. Most of the Ad SDKs have that implemented but for certain regions like EU, California, China. If you are in India and not using this, please fill Required.
  2. We will be in touch with the SDK owners to get more details and update source as we get more information.
SDK Data Types Collected Shared Processed ephemerally? Required or Optional? Purposes Source
Name of the SDK Data types as defined by Google Yes/No based on sharing Purposes as defined by Apple Source of this information
Google Admob Approximate Location Yes No Required "Advertising or marketing, Analytics, Fraud prevention, security and compliance

📄 Resources

  1. Apple Privacy Nutrition Label: https://developer.apple.com/app-store/app-privacy-details/
  2. Steps to fill the Apple Privacy Nutrition Label Form: https://help.apple.com/app-store-connect/#/dev1b4647c5b
  3. Google Safety Section Announcement: https://android-developers.googleblog.com/2021/10/launching-data-safety-in-play-console.html
  4. Steps to fill the Google Safety Section Form: https://support.google.com/googleplay/android-developer/answer/10787469?hl=en

How to Contribute

  1. If there is a SDK missing and you want us to add information, start an issue. Also, if you have any questions or want to report incorrect information, please create an issue.
  2. To add information of SDK or edit it, edit the CSV file and submit a pull request.

🚧 SDKs WIP

So far the project has details of 24 SDKs. We are working to add details for the following SDKs:

  1. Pubmatic
  2. Facebook SDK - Share, Places
  3. Google Tag Manager
  4. Inmobi
  5. Vungle
  6. Twilio
  7. Zendesk
  8. Amplitude
  9. CleverTap
  10. Segment