Me2BA Product Testing Spotlight Report Published: Data Sharing in Primary & Secondary School Mobile Apps
Me2B Alliance
May 4, 2021

60% of School Apps are Sending Student Data to Potentially High-risk Third Parties Without Knowledge or Consent According to New Research from Me2B Alliance


Research uncovers disturbing findings around privacy concerns with the use of school applications

What you need to know:

  • 60% of school apps were sending student data to a variety of third parties, including advertising platforms like Google and Facebook
  • On average, there were more than 10 third-party data channels per app
  • Public-school apps are more likely to send student data to third parties than private-school apps (67% public vs. 57% of private school apps)
  • 18% of public-school apps included very high-risk third parties – i.e., third parties that further share data with possibly hundreds or thousands of networked entities
  • Android apps are much more likely than iOS apps to be sending data to third parties, and are much more likely to be sending to high or very high-risk third parties

Me2B Alliance, a non-profit industry group focused on respectful technology, today published a research report to drive awareness to the data sharing practices of education apps associated with schools and school districts. According to the research findings, 60% of school apps were sending student data to a variety of third parties, including advertising platforms like Google and Facebook.

The Me2B Alliance Product Testing team audited a random sample of 73 apps from 38 schools in 14 states across the U.S., covering over half a million people (students, their families, educators, etc.). The audit methodology mainly consisted of examining data flow from the apps to external third-party vendors. The report, “School Mobile Apps Student Data Sharing Behavior,” is available for download at no charge.

Most mobile apps are built with software development kits (SDKs), which provide developers with pre-packaged functional modules of code and the potential of creating persistent data channels directly back to the third-party developer of the SDK. As part of the analysis, the magnitude of third-party data sharing in educational apps, as evidenced by the number of SDKs included in apps, was examined.

Key takeaways from the report:

  • There is an unacceptable amount of student data shared with third parties – particularly advertisers and analytics platforms – in school apps.
  • School apps – whether iOS or Android, public or private schools – should not include third-party data channels.
  • iOS apps were found to be safer than Android apps, and with ongoing improvements, the “privacy gap” will widen unless Google makes some changes.
  • People still have too little information about which third parties they’re sharing data with, and the app stores (Apple and Google Play) must make this information more clear.

“The findings from our research show the pervasiveness of data sharing with high-risk entities and the amount of people whose data could be compromised due to schools’ lack of resources,” said Lisa LeVasseur, executive director of Me2B Alliance. “The study aims to bring these concerns to light to ensure the right funding support and protections are in place to safeguard our most vulnerable citizens – our children.”

Download the report, “School Mobile Apps Student Data Sharing Behavior,” at no charge. School systems looking for more information can contact admin@me2ba.org. Organizations interested in advancing standards in ethical data and mobile and internet practices can visit the website to learn more about Me2B Alliance membership.

About the Me2B Alliance
The Me2B Alliance is a nonprofit fostering the respectful treatment of people by technology.  We’re a new type of standards development organization – defining the standard for respectful technology. Scenarios like the ones described in this report – where user data is being abused, even inadvertently – highlight the types of issues we are driven to prevent through independent testing, as well as education, research, policy work, and advocacy.

Press

Friday, May 7.

It was 7:30 Tuesday morning when the Me2B Alliance published its new Spotlight Report on School Mobile Apps Data Sharing Behavior. By lunchtime the nonprofit’s research was reported on the national news. The Washington Post, Gizmodo, Apple Insider, American Online News, AdExchanger, and MSN picked up the story, as did a growing list of other carriers (links below), resulting in a boost to the visibility of the Me2B Alliance’s findings about the widespread and risky sharing of students’ personal information by school’s utility apps.

Publication Title
24×7 Guru Android apps 8 times more ‘dangerous’ than iOS apps for students, claims study
74million 60% of School Apps Are Sharing Kids’ Data With Third Parties
9to5Mac Report: Android apps send student data to ‘very high-risk’ third parties 8x more often than iOS
AdExchanger 60% Of School Apps Are Improperly Sharing Student Data With Third Parties
American Online News 60% of School Apps Are Sharing Your Kids’ Data With Third Parties
Apple Insider Of the 60% of school apps sharing data, Android versions much worse than iOS
Canada Free News Research: 60% of School Apps Sending Student Data to Third Parties Without Parental Consent
Digital Information World In comparison with iOS, Android apps are 8 Times more responsible for sharing student data with high risk third parties
EconoTimes Android, iOS student apps associated with public schools more likely to contain ad SDKs and share data with third parties
Future Pro Tech Android Apps are Sharing Data to High Risk Parties 800% More Than iOS
Gizmodo 60% of School Apps Are Sharing Your Kids’ Data With Third Parties
Gizmodo AU 60% of School Apps Are Sharing Your Kids’ Data With Third Parties
iPhone Hacks Education Apps Send Data to ‘Very High Risk’ Third Parties 8 Times More on Android As Compared to iOS
Laptop Magazine School mobile apps are targeting your kids — 67% send their private data to third parties
MakeUseOf Report: Most Educational Apps in US Schools Send Data to Third Parties
MSN 60% of School Apps Are Sharing Your Kids’ Data With Third Parties
Notebook Check New study finds 60% of apps used by U.S. schools share student data with third parties, sometimes without the users’ knowledge
Root Android Report: Android apps send student data to ‘very high-risk’ third parties 8x more often than iOS
Softpedia 60% of U.S. School Apps Disclose Collected Data Without Permission
Tech Times Android School Apps More Likely to Share Data to Third-Parties Than iOS Version, Research Shows
TechJuice Android Apps Share More Data To Third Parties Than iOS
The Cyberwire Roundup: Pulse Secure VPN patched. Scripps Health’s IT security incident. Android banking Trojans. Cyber threats to the Tokyo Olympics.
The Record by Recorded Future Most K-12 apps send kids’ personal info to advertisers and other third parties, study finds
The Register American schools’ phone apps send children’s info to ad networks, analytics firms
The Washington Post Cybersecurity 202 Newsletter: The Biden administration will prioritize cybersecurity in the distribution of $1 billion in federal IT funding // Sixty percent of education apps used by schools were sending data to third-party advertising platforms, researc
WccfTech Android Apps Used in Schools are Sending Student Data to High-Risk Third Parties 8 Times More than iOS