New IT-AMG study reveals the most invasive apps

A new study reveals that Instagram and Facebook are the apps that collect the most user data. The research, undertaken by IT Asset Management Group (IT-AMG) analysed the privacy policies of over 5,000 apps from the Apple App Store. These apps were selected from a broader list of the top 100 apps in each category, with duplicates and those missing data removed.

To determine which apps are the most invasive, they created an index out of 100 based on 46 indicators, including 35 types of data, six purposes for data collection, and five different types of user relationships. The level of privacy intrusion was measured by whether each data type is tracked and linked, tracked, linked, not linked or tracked, and not collected at all, with “tracked and linked” being the most intrusive.

IT-AMG is a certified ITAD firm specialising in secure IT asset disposal and enterprise-grade IT equipment buyback.

Instagram and Facebook are first

Instagram and Facebook come in first place with an index score of 61.47 out of 100. Both apps are among the most widely used worldwide and collect 32 out of 35 data types, 25 of which are linked to the user, while seven are linked and tracked to the user. These apps also rank highly because of how invasive they are in collecting sensitive information such as physical addresses, devices, and user IDs. This is in stark contrast with other popular entertainment apps such as YouTube and TikTok, which rank 27th and 76th.

Coming in third is Grab, an Asian delivery service, with a 55.57 out of 100 score. This app collects 27 data types: 8 are linked to the user, and 15 are linked and tracked. As a ride-hailing and food delivery app, it collects sensitive information such as payment information and other financial data, as well as precise location and purchase history.

In fourth place, a three-way tie sees Threads, Meta Business Suite, and Messenger, each scoring 54.53 out of 100. These apps collect 32 data types, and while all are linked to the user, none are tracked.

Retail apps further down the list

Further down the list, Nordstrom Rack: Shop Deals ranks seventh with a score of 53.62, collecting 22 data types, four of which are linked to the user, and 18 are both linked and tracked.

In eighth place, Nordstrom follows closely with a score of 52.54. It collects 22 data types, five linked to the user and 17 linked and tracked.

Pinterest is in ninth place with an index score of 50.06. This app collects 29 data types, 22 of which are linked to the user and six of which are linked and tracked. Rounding out the top ten is AE + Aerie, short for American Eagle Outfitters, the apparel brand, scoring 50.01 out of 100. This app collects 21 data types, three of which are linked to the user and 16 of which are linked and tracked.

Photo-Video apps are most invasive

Of all the apps and categories studied, Photo-Video Apps are the most invasive. Although only 23 were over the minimum review threshold and therefore eligible for the study, the category’s overall score is 38.54 out of 100.

These are followed by Social Networking Apps and Food and Drink Apps. Richy George, Chief Revenue Officer of IT Asset Management Group (IT-AMG) commented on the findings, “As our reliance on mobile devices and, more specifically, mobile apps continue to grow, it’s essential for users to be aware of the extent to which their data is being collected, linked, and tracked.

“The data highlights just how invasive apps can be, with two of the most frequent and widely used ones, Instagram and Facebook, leading the charge. This is a reminder for consumers not just to accept any privacy policy blindly, but to take control of their privacy settings instead and stay informed about the data practices of the apps they use daily.”

Enterprise Times: What this means for businesses

Context-aware mobile phones enable smart applications but also raise privacy concerns due to increased data demand. Some of the key areas of user concern include misconceptions, specific worries, and ways to mitigate risks—especially regarding financial loss, physical harm, or manipulation. Transparency and user control often emerged as crucial themes; effective privacy measures should prioritise keeping users informed and involved. Hence the importance of privacy policies of mobile apps.

The study by IT Asset Management Group (IT-AMG) analysed the privacy policies of more than 5,000 Apple App Store apps to identify those collecting the most user data. Not surprisingly, Instagram and Facebook topped the list, gathering 32 out of 35 possible data types. Furthermore, there’s a range of apps primarily in travel and retail were found to be the most intrusive category overall. This was followed by Social Networking and Food and Drink Apps. IT-AMG’s Chief Revenue Officer, Richy George, correctly stresses the importance of users understanding how their data is collected, linked, and tracked.

The research did not address the impact of AI on privacy policies. This will require further research and analysis. Consumers have to become much smarter in reviewing privacy settings and policies carefully. Preferably, before they just click the opt-in box.

 

The post New IT-AMG study reveals the most invasive apps appeared first on Enterprise Times.