Back in July I described how Google had (quite rightly) joined the fight against stalkerware – those apps which allow someone to remotely spy upon your phone, your messages, and your location, without your permission.
Google resolved to do this by prohibiting products and services that promoted themselves as spying and tracking people without their authorisation.
As I explained at the time, Google’s solution is far from perfect… but it turns out that Google had thrown another spanner in the works.
Check out this part of Google’s updated policy for developers related to stalkerware.
Yes, you read that correctly.
Google’s current guidance for developers is that it’s okay for apps to track people (such as a spouse), but not for parents to track their children.
As The Verge reports, someone at Google mixed up the words “can” and “cannot”. Which is somewhat unfortunate. After all, that’s the diametric opposite of what Google wanted!
A revised version of the stalkerware policy is due to come out soon:
Stalkerware – effective October 1, 2020
Code that transmits personal information off the device without adequate notice or consent and doesn’t display a persistent notification that this is happening.
Stalkerware apps typically transmit data to a party other than the PHA provider.
Acceptable forms of these apps can be used by parents to track their children. However, these apps cannot be used to track a person (a spouse, for example) without their knowledge or permission unless a persistent notification is displayed while the data is being transmitted.
Phew!
Whether it’s right for parents to track their children without a clear notification being displayed on the child’s device is a question for another day…
Found this article interesting? Follow Graham Cluley on Twitter or Mastodon to read more of the exclusive content we post.
Good old US “Can” / “Can’t” (sometimes with reduced or even silent “t” ?