Locatie uit een app die wordt doorverkocht
Locatie die een onderdeel in een app verzamelt, duikt op als dataset bij een partij die de gebruiker nooit koos.
- Familie
- Keten
- Status
- actief
- Geldt voor
- mobile-app
Wat er gebeurt
A component inside an application reads the location the user granted to that application and forwards it to its own infrastructure. That party is a dealer rather than a user of the values: they are pooled with those from other applications and offered onward as a product, by country, by period or by audience.
Waarom het ertoe doet
Location says where someone sleeps, works, prays and receives care, and a handful of points is enough to single a person out. The permission was granted to one application for one purpose, and the step that follows happens where nothing on the screen refers to it. Once the set is sold it is held by parties the person cannot name and therefore cannot ask.
Veelvoorkomende oorzaken
- monetisation component included for revenue, with collection enabled by default
- a permission granted for a map or a delivery feature that every component in the process can read
- a supply agreement in which the data is the payment for the component
- a component inherited from a framework or from a white-label build
Dit is het níet
A component collecting on its own account inside the app is Bundled component collection, and that entry stops at the first recipient. This one is the step after it: the same values offered onward as a product. It needs evidence beyond the capture, and where that evidence is missing the honest finding is the other entry rather than this one.
Hoe je het vaststelt
Indicator
Two things together: a capture of the running application shows location values leaving to a host of a component, and an offer, catalogue entry or supply document from a party downstream describes a dataset of the same kind with a coverage that includes this application or its category. The finding is the pair; either half on its own is a different and smaller finding.
Methode
third-party-confirmed
Kwaliteit van de detectie
80 van 100
De grenzen van deze bevinding
Wat dit patroon zou weerleggen
- The offer names a category of sources and nothing ties the measured application to it.met de hand te toetsende bevinding wordt zwakkerCommon, and it is where this finding usually fails. Without the link the report says that location leaves to the component, and no more.
- The values leave only while the user has the relevant feature open, and go to the party that delivers it.machinaal te toetsende bevinding vervalt
- The party downstream states that the set is derived and cannot be traced back to a device or a person.niet uit de meting af te leidende bevinding wordt zwakkerA claim to test rather than accept. Ask over what period and at what precision: a coarse aggregate and a rounded trace are not the same thing.
- The component is a processor of the developer and the values are used only to deliver the app's own function.niet uit de meting af te leidende bevinding krijgt een ander patroon
Wat dit patroon níet vaststelt
- harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
- severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
- unlawfulness; that is for a supervisory authority or a court
- intent; a fault is usually a build decision, not a plan
- absence: not finding it in one capture is not evidence that it is not there
Reproduceren
- manual
METHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above
Juridisch kader
Bepalingen
Rechtspraak
Veelgehoorde tegenwerpingen
The user granted location permission.
To the application, for what the application does. A dialogue about a map is not a basis for supply to a party further down, and the person had no way to see that second step.
We do not sell data, we work with partners.
The question is what leaves and to whom, not what the arrangement is called. Name the parties and state what each of them receives.
The data is anonymous.
A location trace is among the least anonymous data there is: a few points identify a household. Establish the precision and the interval before accepting the label.
Geldt wanneer
to-processing
Aangetroffen in
De onderzoeken waarin dit patroon gemeten is.