The Potentially ‘Massive’ Google Play Privacy Issue You Need to Know About

(Image: AP/Google Inc.)
An Australian app developer has unveiled what he calls a “massive” privacy issue for those making purchases on Google Play, the store for Android apps.
Dan Nolan wrote on his blog that after logging onto his Google Play “merchant account” to see orders of his app, he found he had access to email addresses, suburbs and sometimes full names of people who made purchases, even if the person canceled their app order.
“Each Google Play order is treated as a Google wallet transaction and as such software developers get all of the information (sans exact address) for an order of an app that they would get from the order of something physical,” Nolan wrote. “Even underneath the order information there is a flag that says ‘Email Marketing’ with a value next to it, because of course scrupulous developers would always obey that flag.”
Nolan goes on to say with such information Google Play customers could be harassed for, say, leaving negative reviews or asking for an app refund. He calls this a “massive oversight by Google” and noted that there is no reason developers should be able to obtain such information unless users opted in to allow for it to be shared.
“Let me make this crystal clear, every App purchase you make on Google Play gives the developer your name, suburb and email address with no indication that this information is actually being transferred,” he wrote. “This is a massive, massive privacy issue Google. Fix it. Immediately.”
In an interview with News.com.au, Nolan said he thinks this could impact everyone who has purchased an app through Google Play, noting he hasn’t found an opt out feature during the purchase process.
“I don’t know whether it applies to free apps, but there are hundreds of thousands of apps that are available for pay on the play store and there are millions of people who buy Android apps out there, I’d say easily millions or tens of millions of people,” Nolan said to News.com.au.
Here’s what Google’s privacy policy states about sharing information with outside parties:
We will share personal information with companies, organizations or individuals outside of Google when we have your consent to do so. We require opt-in consent for the sharing of any sensitive personal information.
This “sensitive personal information” is defined by Google as “confidential medical facts, racial or ethnic origins, political or religious beliefs or sexuality.”
Google has not responded to News.com.au’s request for comment.
Learn more about Google Play as a service for Android devices in this promo video:
(H/T: Drudge Report)
In CONTROL, Glenn Beck presents a passionate, fact-based case for guns that reveals why gun control isn’t really about controlling guns at all; it’s about controlling us. Find out more HERE.
















































































































Some1else
Posted on February 15, 2013 at 7:58pmIn this digital age there is no such thing as privacy!
Report this comment
stumpy68
Posted on February 15, 2013 at 8:21pmWho gives their real info to google
use your imaginations folks unless you use it for your business
dont give free email providers your correct information
and if you do use it for business stop using it and buy a domain and hosting
its cheap and less intrusive.
Report this comment
Schteveo
Posted on February 15, 2013 at 4:28amYet another reason to NOT have a smart phone
Report this comment
the_truth_or_not
Posted on February 15, 2013 at 12:03amWant the power of google search, but not their privacy policy? a good site for you is https://www.startpage.com They will send your search request using their IP address and return your search results to you. They do not record your IP address. For all intended purposes, google only sees several hundreds/thousands of search requests per min./second. and they do not record your IP address. You can also visit web pages via proxy through startpage.
Report this comment
vayapues
Posted on February 14, 2013 at 12:06pmHere everyone you can have my email address: vayapues@yahoo.com
Give me a break! This is not a security issue. That is my actual email address, but good luck spamming or “harassing me!”
If I order something from someone, I really don’t care that they get my geographical location, or my email. Heck, this website (the Blaze) get’s my geographical website every time I visit it.
Report this comment
Farniente
Posted on February 14, 2013 at 4:33pmvayapues, you may not care if there is a security issue here or not, but your opinion doesn’t represent those of us who actually care about privacy issues. Maybe you’re also one of these folks who likes to tweet photos of your penis? Most of us shy away from letting our sexual organs out of our pants in public.
Report this comment
media-bias-steals-elections
Posted on February 14, 2013 at 11:47amNice, this includes all free apps that you download? Fix it Google.
1. Never use a credit card by phone, or by digital transaction using a Android Phone (unless its a gift card)?
2. Never use a real email address, use an alias or one that is forwarded to a throw away account?
3. You don’t have time to figure out what is a legitimate operating system file, and some spy ware on a phone, which means the poor, are the ones targeted, since these are the cheapest phones on the market?
There is only one app on your Android phone that you are not allowed (or want) to have privacy on? Iheart.com, you want them to know you listen to Glenn Beck radio?
Yes, we can change fundamentally change America? Eventually, they want us to do away with credit cards for smart phones? Not me.
Report this comment
DougHuffman
Posted on February 14, 2013 at 11:45amH/T Drudge
MO Dems Introduce Bill to Confiscate Firearms — Give Gun Owners 90 Days to Turn in Weapons…
http://www.thegatewaypundit.com/2013/02/missouri-democrats-intruduce-legislation-to-confiscate-firearms-gives-gunowners-90-days-to-turn-in-guns/?ModPagespeed=noscript
Fetching of original content failed with the following error: Proxy Publisher Failure CONNECTION_ERROR. If you own this domain, please consult this FAQ.
http://code.google.com/speed/pss/faq.html#publisherfailure
Report this comment
Saff SGT
Posted on February 14, 2013 at 11:38amGoogle supports Obama and we know he is the biggest Communist in the world as well as being a Muslim brotherhood assss kisssser. We all need to be alert and watching for Comrads coming your way
Report this comment
Saff SGT
Posted on February 14, 2013 at 11:33ammy shotgun guarantees my 1st amendment rights, Its great to be an American I love it so
Report this comment
Saff SGT
Posted on February 14, 2013 at 11:30am2nd amendment will guarantee the 1st amendment, heheh life is just great!!
Report this comment
Saff SGT
Posted on February 14, 2013 at 11:27amanybody, any group that denies 1st amendment rights will in the end get nailed and I hope good and for ever. 1st amendment shall not be messed with ever
Report this comment
Anonymous T. Irrelevant
Posted on February 14, 2013 at 11:04amHow many times will people be told this about Google and FaceBook, before they will believe, unless they just don’t care about their privacy. From what I’ve heard, FaceBook is losing a lot of customers to SnapChat, a social site that DOESN’T sell your information.
Report this comment
DougHuffman
Posted on February 14, 2013 at 11:25amObtaining Snapchat app from Apple App Store and/or G00gle Play is inherently violative of privacy and not secure. That’s the topic of this thread, the privacy issues with G00gle Play. Sheesh..
Report this comment
DougHuffman
Posted on February 14, 2013 at 10:47amLaw professor Jonathan Zittrain wrote The Future of the Internet – And How to Stop It, in which he chronicles the death of the generative internet, killed by such as G00gle. “When something online is free, you’re not the customer, you’re the product.”
http://futureoftheinternet.org/static/ZittrainTheFutureoftheInternet.pdf
http://futureoftheinternet.org/meme-patrol-when-something-online-is-free-youre-not-the-customer-youre-the-product
Report this comment
Saff SGT
Posted on February 14, 2013 at 10:39amstay away from Google
Report this comment
DeniseJ
Posted on February 15, 2013 at 11:09amGoogle is EVIL. Why? Cause of Street View (creepy anyhow) – in making its database, they captured electronic data from wifi networks users. thieves!! They are in the business of collecting and selling YOUR information, looks like they’re not so forthcoming about how they get it and how much.
Report this comment
Saff SGT
Posted on February 14, 2013 at 10:38amAny grpup or person who denies the 1st amendment needs to be disposed of before they geta foot hold. They are worthless communist bastrads, get rid of them fast
Report this comment
DougHuffman
Posted on February 14, 2013 at 10:58amReally? DaBlasé is not subject to the First Amendment, being a private entity. The First Amendment binds only government entities. No damn wonder, coming from Anony Mouse, a junior NCO
Report this comment
Saff SGT
Posted on February 14, 2013 at 10:36amI deleted google stuff a long time ago, plus i dont use cell phones, smart phones, androids etc. if I want to see and talk to my neighbor ill walk over there like a real American and converse. Im going back to real America I think the modern day stuff suck bad and destroys folks from uniting.
Report this comment
RedDirtTexas
Posted on February 14, 2013 at 10:32amHow did I get this bar code on my forehead?
Report this comment
Stoic one
Posted on February 14, 2013 at 10:21amglad i do NOT use Google
Report this comment
Caniac Steve
Posted on February 14, 2013 at 10:37ami use google for email only and I will next month chaging at between hotmail & gmail..they both sell your information ..and i mean ALL of it..between spammers even debt collectors purchase the information..
Report this comment
DougHuffman
Posted on February 14, 2013 at 10:42amReagan.com advertises secure e-mail $40 an^-1
Report this comment
ValidFib
Posted on February 14, 2013 at 10:03amWhat happened to “Don’t be Evil”?
Report this comment
DougHuffman
Posted on February 14, 2013 at 10:02amI tried to use an on-line learning service, but could not reduce my security sufficiently. When I investigated the site, most of its code was G00gle/at Google.
Report this comment
objectivetruth
Posted on February 14, 2013 at 9:54amGoogle just keeps getting hit with privacy issues.
Report this comment
Cavallo
Posted on February 14, 2013 at 9:53amDon’t use Google.
Report this comment