App Privacy Labels: What They Really Tell You

TL;DR: App privacy labels are short summaries of what data an app says it collects, shown on the App Store and Google Play. They're written by the app's own developers, not by Apple or Google, so treat them as a claim to check, not a guarantee. The label plus your phone's permission settings together give you the real picture.

You're installing a free coloring app for your kid. Under the Install button, a little box says "Data Not Collected." Looks clean. Two minutes later, the app asks for your contacts and location.

That gap between what a label promises and what an app asks for is where most people get burned.

What app privacy labels actually show

Apple calls it "App Privacy" and puts it in a box under the screenshots. Google calls it "Data safety" and buries it lower on the listing. Both answer the same three questions: what data the app collects, whether it's tied to your identity, and whether it's used to track you across other apps.

"Collected" is broad. It covers anything sent off your phone, including crash logs and rough location, not just your name and email. "Linked to you" means it can be tied to your account or device. "Used to track you" means it gets shared with other companies, usually ad networks.

Here's the catch. Both stores rely on developers to fill this in themselves. There are rules, and both companies say they spot-check, but neither reads every app's code. Researchers have found labels that understate what apps actually do.

The mistakes most people make

• Reading "Data Not Collected" as "nothing leaves my phone." It usually means the app's own code doesn't collect data. Ad and analytics tools built into the app may still gather some. Free apps with ads almost never qualify.
• Skipping the "Linked to You" column. "Data Not Linked to You" sounds private. It isn't. It just means the company can't tie that data to your name or account. It's still collected.
• Confusing labels with permissions. The label is a statement about data handling. The permission pop-up is the actual switch. An app can have an honest label and still ask for your microphone for no good reason.
• Trusting an old label. Developers update labels when they update the app, and sometimes the label lags behind. New ad partner, new data flow, same old label.
• Assuming a short label means a safe app. A plain notes app asking for your contacts is stranger than a social app asking for photos.

What this means for you: the 60-second check

Before installing, open the label and look at just two lines: "Data Used to Track You" on iPhone, or "Data shared" on Android. If a free app with no obvious reason to show ads lists your location or contacts there, pick something else.

After installing, check permissions. On iPhone, go to Settings > Privacy & Security. On Android, open Settings > Privacy > Permission manager. Turn off anything the app doesn't need. A game doesn't need your contacts, and a photo editor doesn't need your microphone.

Two more quick wins. On iPhone, tap "Ask App Not to Track" when the pop-up appears (it arrived with iOS 14.5 in 2021). On Android, reset your advertising ID under Settings > Privacy > Ads. Neither is perfect, but both cut down on cross-app tracking more than any label will.

Read the label, then check the switch. That second step is the one most people skip.

Key Takeaways

• Privacy labels are self-reported by developers, so treat them as a claim, not a fact.
• "Data Not Linked to You" still means your data is being collected.
• The label says what an app claims; your phone's permission settings control what it can actually reach.
• Check two things only: tracking or sharing, plus location and contacts.

Frequently Asked Questions