Systems and methods for determining children's privacy risk of an application
Non-limiting, non-exclusive aspects of the present disclosure relate to determining the user group to which an application is directed, and the level of user group privacy risks associated with the application. In particular, the disclosed technology receives, detects and processes application information, determines if the application is directed at a group of users (e.g., children), and, if the application is indeed directed at the target user group, the disclosed technology generates a user group privacy risk level derived from application information signals. Application information signals may include a determination of whether the application requires permissions that enable access to or capture of personal information from or related to the application's users such as residential end-user IP address or precise location information. The privacy risk assessment may be based on signals associated with applicable privacy regulations (e.g., the rule implementing the Children's Online Privacy Protection Act (COPPA)).
1 . A system for determining a level of user privacy risk of an application, the system comprising:
a processor; and
memory including instructions which when executed by the processor, cause the processor to:
receive information associated with an application;
determine a target user associated with the application, wherein determining the target user group comprises:
performing a keyword analysis by analyzing the semantic context of one or more keywords associated with the application and comparing the semantic context of the one or more keywords with the application to a plurality of keywords from a plurality of applications with known target audiences; and
analyzing one or more images associated with the application to determine whether the images correspond to the keyword analysis;
determine, based at least on the information, signal values associated with at least a part of a plurality of signals associated with the application, wherein the plurality of signals comprise one or more of:
the target user group associated with the application,
a detectable privacy policy associated with the application,
a detected privacy policy containing specific disclosures required by applicable law,
an access permission associated with the application,
a use of a residential IP address associated with the application, or
a transmission of location data by the application;
automatically determine, based on the signal values and a set of predetermined rules associated with user privacy risk levels, a level of user privacy risk associated with the application.
2 . The system of claim 1 , wherein the target user group includes users under thirteen years of age.
3 . The system of claim 1 , the method further comprising:
receiving, from a digital advertising pipeline associated with the application, an IP address of the application.
4 . The system of claim 1 , wherein the information is received from an application store associated with the application.
5 . The system of claim 1 , wherein receiving information further comprising:
receiving one or more search terms;
discovering one or more applications based on the search terms; and
receiving information associated with the one or more discovered applications.
6 . The system of claim 5 , wherein discovering one or more applications further comprising:
receiving an include criteria for one or more include search terms;
discovering one or more applications with the one or more include search terms in the application's title, description, or privacy policy; and
receiving information associated with the one or more discovered applications that have the include search terms.
7 . The system of claim 5 , wherein discovering one or more applications further comprising:
receiving an exclude criteria for one or more exclude search terms;
discovering one or more applications with the one or more exclude search terms in the application's title, description, or privacy policy; and
filtering out the one or more discovered applications with the one or more exclude search terms.
8 . The system of claim 1 , wherein the set of predetermined rules associated with user privacy risk levels establishes a risk level based on a predetermined combination of signal values relating to an application.
9 . A method for determining a level of user privacy risk of an application, the method comprising:
receiving information associated with an application;
determining a target user group associated with the application, wherein determining the target user group comprises:
performing a keyword analysis by analyzing the semantic context of one or more keywords associated with the application and comparing the semantic context of the one or more keywords with the application to a plurality of keywords from a plurality of applications with known target audiences; and
analyzing one or more images associated with the application to determine whether the images correspond to the keyword analysis;
determining, based at least on the information, signal values associated with at least a part of a plurality of signals associated with the application, wherein the plurality of signals comprise one or more of:
the target user group associated with the application,
a detectable privacy policy associated with the application,
a detected privacy policy containing specific disclosures required by applicable law,
an access permission associated with the application,
a use of a residential IP address associated with the application, or
a transmission of location data by the application;
automatically determining, based on the signal values and a set of predetermined rules associated with user privacy risk levels, a level of user privacy risk associated with the application.
10 . The method of claim 9 , wherein the target user group includes users under thirteen years of age.
11 . The method of claim 9 , the method further comprising:
receiving, from an advertising pipeline associated with the application, an IP address of the application.
12 . The method of claim 9 , wherein the information is received from an application store associated with the application.
13 . The method of claim 9 , wherein receiving information further comprising:
receiving one or more search terms;
discovering one or more applications based on the search terms; and
receiving information associated with the one or more discovered applications.
14 . The method of claim 13 , wherein discovering one or more applications further comprising:
receiving an include criteria for one or more include search terms;
discovering one or more applications with the one or more include search terms in the application's title, description, or privacy policy; and
receiving information associated with the one or more discovered applications that have the include search terms.
15 . The method of claim 13 , wherein discovering one or more applications further comprising:
receiving an exclude criteria for one or more exclude search terms;
discovering one or more applications with the one or more exclude search terms in the application's title, description, or privacy policy; and
filtering out the one or more discovered applications with the one or more exclude search terms.
16 . The method of claim 9 , wherein the set of predetermined rules associated with user privacy risk levels establishes a risk level based on a predetermined combination of signal values relating to an application.
17 . A method for determining if an application targets children, the method comprising:
receiving information associated with an application, wherein the information about the application comprises:
a keyword analysis by analyzing a semantic context of one or more keywords associated with the application; and
an image analysis generated by analyzing one or more images associated with the application to determine whether the images correspond to the keyword analysis;
determining, based at least on the information, condition values associated with at least a part of a plurality of conditions associated with the application, wherein the plurality of conditions comprise one or more of:
the application is in a games, family, kids, children, or education category,
the age rating provided in the application is below the target age range for children,
the application's title or description contains words from a keyword list,
the application is part of a specially designated program directed at children, or
the application has been determined to be targeted at children on a different operating system;
automatically determining, based on at least one of the conditions values being satisfied, that the application targets children.
18 . The method of claim 17 , wherein receiving information further comprising:
receiving one or more search terms;
discovering one or more applications based on the search terms; and
receiving information associated with the one or more discovered applications.
19 . The method of claim 18 , wherein discovering one or more applications further comprising:
receiving an include criteria for one or more include search terms;
discovering one or more applications with the one or more include search terms in the application's title, description, or privacy policy; and
receiving information associated with the one or more discovered applications that have the include search terms.
20 . The method of claim 18 , wherein discovering one or more applications further comprising:
receiving an exclude criteria for one or more exclude search terms;
discovering one or more applications with the one or more exclude search terms in the application's title, description, or privacy policy; and
filtering out the one or more discovered applications with the one or more exclude search terms.