Proportion of apps sharing user data and type of destination (n=25)
| User data type | No. of apps sharing with their developers (%) | No. of apps sharing to infrastructure-related third parties (%) | No. of apps sharing to analysis-related third parties (%) | |
| Data considered ‘personal data’* | Device ID† | 5 (20) | 4 (16) | 10 (40) |
| Email address† | 6 (24) | 4 (16) | 3 (12) | |
| Name/last name† | 6 (24) | 1 (4) | 1 (4) | |
| Birthday | 6 (24) | 1 (4) | 0 | |
| IMEI number | 0 | 1 (4) | 0 | |
| Password | 2 (8) | 1 (4) | 1 (4) | |
| Host name | 0 | 0 | 1 (4) | |
| Fine grain location | 2 (8) | 0 | 2 (8) | |
| Local IP address | 2 (8) | 0 | 0 | |
| Coarse grain location | 1 (4) | 0 | 0 | |
| Personal factors | 2 (8) | 0 | 0 | |
| Personal conditions | 1 (4) | 0 | 0 | |
| Gender | 2 (8) | 0 | 0 | |
| Data not considered ‘personal data’ | OS version | 15 (60) | 22 (88) | 25 (100) |
| Device name | 11 (44) | 19 (76) | 24 (96) | |
| Country | 3 (12) | 14 (56) | 16 (64) | |
| Time zone | 6 (24) | 11 (44) | 20 (80) | |
| Connection type | 4 (16) | 4 (16) | 21 (84) | |
| Phone information | 1 (4) | 0 | 2 (8) | |
| Browsing | 1 (4) | 0 | 0 | |
| Jailbrokenness | 0 | 0 | 1 (4) |
*Considered personal data under the General Data Protection Rules (GDPR), that is, ‘any information relating to an identified or identifiable natural person’.
†Unique identifier.
IMEI, international mobile equipment identity; IP, internet protocol; OS, operating system.