Close Menu
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Facebook X (Twitter) LinkedIn
Facebook X (Twitter) LinkedIn
Information Security BuzzInformation Security Buzz
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Subscribe
Information Security BuzzInformation Security Buzz
Home - Application Security - Kids, Apps, and Data: How Playtime Became a Privacy Minefield
Application Security Data Protection Latest News News & Analysis Security Study & Research

Kids, Apps, and Data: How Playtime Became a Privacy Minefield

Kirsten DoyleBy Kirsten DoyleSeptember 18, 20252 Mins Read
Share LinkedIn Twitter Facebook Copy Link Email
Kids, Apps, and Data
Share
Facebook Twitter LinkedIn Email Copy Link
Quick AI Summary
ChatGPTClaudeGeminiGrokPerplexityDeepSeekCopilot

Children’s apps are supposed to entertain and educate. Instead, many quietly harvest data: names, locations, photos, voice recordings, purchase histories. The list keeps growing. 

A new analysis by SafetyDetectives shows the scale. Half of the most popular child-targeted apps collect broad personal data. Among 74 apps studied globally, 34 collect data. Twenty-one share it. On average, each app pulls 5.7 data points. 

Some apps are worse. Eleven of the most aggressive collect seven or more types of personal information. Together, these data-hungry apps account for more than half of all data points tracked. 

Developers often promise encryption and compliance with Google Play Families Policy. Reality diverges. Only 62% of these apps allow parents or children to request deletion of collected data. 

Location matters too. Apps in Oceania, particularly New Zealand, gather more data per app than in other regions. European averages vary widely, highlighting inconsistent privacy practices. 

The risks are clear: Excessive data collection, in-app purchases with aggressive tracking, opaque privacy policies, limited parental controls, exposure to inappropriate content, and vulnerabilities in app security.  

Every gap leaves room for exploitation, and marketing to children, malicious actors, and even criminal activity becomes possible. 

Parents face a challenge. Transparency is scarce, and parental supervision is limited. Children’s data is quietly being commodified. 

This is more than a technical problem, it’s a societal one. It touches law, education, ethics. The takeaway is simple. Know the apps your children use.  

SafetyDetectives advises parents to:  

Before Downloading:  

  • Check privacy labels on app stores.  
  • Read independent reviews (such as Common Sense Media). 
  • Avoid subscription-based apps with vague policies and age gates like “Are you over 13?” 
  • Support stronger enforcement of children’s privacy laws. 
  • Push schools to vet EdTech tools more thoroughly. 

Opt for safer apps like:  

  • Monkey Preschool Lunchbox (paid, no data collection). 
  • PBS Kids Games (free, strong protections). 

“Until regulators are able to rein in these data mining practices, parents, schools, and watchdogs must act as the first firewall against apps that quietly exploit children’s data for profit,” the company says. 

Playtime should be safe. Right now, it is a data battlefield. Until regulations catch up, vigilance is the first line of defense. 

Kirsten Doyle
Kirsten Doyle
Information Security Buzz News Editor

Kirsten Doyle has been in the technology journalism and editing space for nearly 24 years, during which time she has developed a great love for all aspects of technology, as well as words themselves. Her experience spans B2B tech, with a lot of focus on cybersecurity, cloud, enterprise, digital transformation, and data centre. Her specialties are in news, thought leadership, features, white papers, and PR writing, and she is an experienced editor for both print and online publications.

  • Kirsten Doyle
    AI-Powered Attacks Become Top Concern for Security Professionals, New Filigran Survey Reveals
  • Kirsten Doyle
    ShinyHunters targets Oracle PeopleSoft customers through critical zero-day
  • Kirsten Doyle
    SIG report: AI-generated code is linked to twice the security risk and rising technical debt
  • Kirsten Doyle
    Miasma worm spreads from Red Hat packages to Microsoft repositories

The opinions expressed in this post belong to the individual contributors and do not necessarily reflect the views of Information Security Buzz.

Share. Facebook Twitter LinkedIn Email Copy Link

Related Posts

Building cyber resilience for mission-critical operations in 2026

May 27, 20267 Mins Read

Investigating the aftermath: understanding digital forensics after a cyber incident

May 7, 20265 Mins Read

Microsoft Edge Found Holding Saved Credentials in Plaintext Memory

May 6, 20263 Mins Read
ISB-Bora-Side-Bar

No se ha podido establecer conexión. Error 429

 
ISB-Bora-Side-Bar
Black ISB Logo

Information Security Buzz is an independent resource that provides the experts’ comments, analysis, and opinion on the latest Cybersecurity news and topics

X (Twitter) LinkedIn Facebook RSS

Working With Us

  • About Us
  • Advertise With Us
  • Contact Us

Write For Us

  • How To Contribute

The Pages

  • Privacy Policy
  • Cookie Policy
  • AI Policy
  • Terms & Conditions
  • Copyright Notice

Information Security Buzz and all its contents are copyright © 2014-2025. All rights reserved. All third-party trademarks are recognized.

Type above and press Enter to search. Press Esc to cancel.

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}