New GDPR-Related Benchmarks Revealed by Leading Mobile SDK Management Solution | GBAF

New GDPR-Related Benchmarks Revealed by Leading Mobile SDK Management Solution | GBAF

Editorial & Advertiser disclosure

Global Banking and Finance Review is an online platform offering news, analysis, and opinion on the latest trends, developments, and innovations in the banking and finance industry worldwide. The platform covers a diverse range of topics, including banking, insurance, investment, wealth management, fintech, and regulatory issues. The website publishes news, press releases, opinion and advertorials on various financial organizations, products and services which are commissioned from various Companies, Organizations, PR agencies, Bloggers etc. These commissioned articles are commercial in nature. This is not to be considered as financial advice and should be considered only for information purposes. It does not reflect the views or opinion of our website and is not to be considered an endorsement or a recommendation. We cannot guarantee the accuracy or applicability of any information provided with respect to your individual or personal circumstances. Please seek Professional advice from a qualified professional before making any financial decisions. We link to various third-party websites, affiliate sales networks, and to our advertising partners websites. When you view or click on certain links available on our articles, our partners may compensate us for displaying the content to you or make a purchase or fill a form. This will not incur any additional charges to you. To make things simpler for you to identity or distinguish advertised or sponsored articles or links, you may consider all articles or links hosted on our site as a commercial article placement. We will not be responsible for any loss you may suffer as a result of any omission or inaccuracy on the website.

Home > Top Stories > A Few Days Until GDPR, SafeDK Releases New GDPR SDKs Related Benchmarks: Over 72% of Mobile Apps are Vulnerable to SDK-Related Data Violations; 63% of Ad Network SDKs Access Private User Data

SafeDK analyzed recent data from hundreds of thousands of top Android apps and from over 1000 popular SDKs. Factors studied included access to users’ private data by 3rd party SDKs, the type of private data requested, and more.

SafeDK, the leading mobile SDK management and ad intelligence solution, is releasing new, GDPR SDK-related benchmarks. These numbers complete the data shared in SafeDK’s last Mobile SDKs Trends Report from March 2018.

SafeDK has also released earlier this year the world’s first mobile app GDPR compliance online guide. The guide is based on SafeDK expertise gained after monitoring hundreds of top SDKs, reaching over 100 million MAU (monthly active users) and working with the world’s top app companies.

The General Data Protection Regulation (GDPR), which will come into effect in May 25, 2018, is the EU’s new set of regulations designed to secure user privacy. According to GDPR guidelines for mobile apps, “Mobile publishers should assess the data processing features of a third party component or a third party service before integrating it into a mobile application.” To help clarify the great magnitude of the issue, SafeDK is now releasing in-depth insights about the data processing of the 3rd party SDKs currently integrated into the top mobile Android apps:

Over 71% of all analyzed apps still use at least one SDK that is accessing private user data, making them susceptible to violations as a result.
34% of all analyzed SDKs access private user data through the mobile apps into which they are integrated. This number climbs to over 63% for ad network SDKs.
Over 52% of the top 20 mobile SDKs analyzed access users’ private data.
15% of the examined SDKs access private user data without acknowledging this openly in their formal documentation. All these SDKs are piggybacking the app’s user permissions to access private data covertly from both the app publishers and the end users.
Chart of the percentage of apps that are using SDKs that are accessing different kinds of private user data
Chart of the percentage of SDKs that are accessing different kinds of private user data

Given that the average Android app implements over 18 SDKs, according to the report, the entire industry should not overlook the implications of using 3rd party SDKs, which can often be “black boxes” in terms of accessing and mining private user data.

Orly Shoavi, SafeDK’s CEO cautions that: “The industry players, mobile apps and mobile SDKs still have time to prepare, but they should definitely act quickly. Not meeting requirements may result in severe consequences, while complying with the GDPR is feasible if implementation is carried out optimally. While it’s relatively clear for app developers how to control their own codes, it’s almost impossible to ensure that external SDKs remain compliant without using a dedicated SDK management solution, such as SafeDK.”

SafeDK analyzed recent data from hundreds of thousands of top Android apps and from over 1000 popular SDKs. Factors studied included access to users’ private data by 3rd party SDKs, the type of private data requested, and more.

SafeDK, the leading mobile SDK management and ad intelligence solution, is releasing new, GDPR SDK-related benchmarks. These numbers complete the data shared in SafeDK’s last Mobile SDKs Trends Report from March 2018.

SafeDK has also released earlier this year the world’s first mobile app GDPR compliance online guide. The guide is based on SafeDK expertise gained after monitoring hundreds of top SDKs, reaching over 100 million MAU (monthly active users) and working with the world’s top app companies.

The General Data Protection Regulation (GDPR), which will come into effect in May 25, 2018, is the EU’s new set of regulations designed to secure user privacy. According to GDPR guidelines for mobile apps, “Mobile publishers should assess the data processing features of a third party component or a third party service before integrating it into a mobile application.” To help clarify the great magnitude of the issue, SafeDK is now releasing in-depth insights about the data processing of the 3rd party SDKs currently integrated into the top mobile Android apps:

Over 71% of all analyzed apps still use at least one SDK that is accessing private user data, making them susceptible to violations as a result.
34% of all analyzed SDKs access private user data through the mobile apps into which they are integrated. This number climbs to over 63% for ad network SDKs.
Over 52% of the top 20 mobile SDKs analyzed access users’ private data.
15% of the examined SDKs access private user data without acknowledging this openly in their formal documentation. All these SDKs are piggybacking the app’s user permissions to access private data covertly from both the app publishers and the end users.
Chart of the percentage of apps that are using SDKs that are accessing different kinds of private user data
Chart of the percentage of SDKs that are accessing different kinds of private user data

Given that the average Android app implements over 18 SDKs, according to the report, the entire industry should not overlook the implications of using 3rd party SDKs, which can often be “black boxes” in terms of accessing and mining private user data.

Orly Shoavi, SafeDK’s CEO cautions that: “The industry players, mobile apps and mobile SDKs still have time to prepare, but they should definitely act quickly. Not meeting requirements may result in severe consequences, while complying with the GDPR is feasible if implementation is carried out optimally. While it’s relatively clear for app developers how to control their own codes, it’s almost impossible to ensure that external SDKs remain compliant without using a dedicated SDK management solution, such as SafeDK.”