Android “Kitkat” Update – New Privacy Features

Android “Kitkat” Update – New Privacy Features

As the new Android OS 4.4 codenamed “KitKat” is now available for the latest Nexus phones (and will be available for Nexus 4, 7, 10 and Google Play editions of the Samsung Galaxy S4 and the HTC One in the coming weeks), it’s time to take a look at the system’s new privacy features.  Here is what we found:

New Privacy-friendly features

New “Advertising ID”

Prior to the KitKat update, ad networks and advertisers would track users through the device’s “Android ID.”  Typically, apps would pass this ID to ad networks, which would hash it and use it to track users as they interacted with various apps.

The Android ID could only be reset by wiping the entire device. Opting out required the user to visit the third-party ad network’s site and enter in his or her device’s (lengthy) ID.

KitKat contains a new identifier called the “Advertising ID.”  This new ID is subject to a new user setting can be used to opt-out of “behavioral advertising.”  According to Google, when a user activates this Opt-Out setting, the Advertising ID will only be used for contextual advertising, frequency capping, conversion tracking, reporting and security and fraud detection.

Users running Android 2.3 or later can access these new settings via the following steps: in Google Settings, select “Ads” and you will see your Advertising ID.  On this screen you can select the option to “Reset Advertising ID.”  Tap the box labeled “Opt Out of interest-based ads” to opt out.

Android Advertising ID

Google writes that beginning August 1st 2014, “all updates and new apps uploaded to the Play Store must use the advertising ID (when available on a device) in lieu of any other device identifiers for any advertising purposes.”  Opting out of interest based ads through the above method only affects apps – it does not affect tracking or targeting on the browser.

More details from Google’s terms:

  • The status of the “Opt out of Interest-based Advertising” setting must be verified on each access of the ID.
  • The advertising identifier will not be connected to personally-identifiable information or associated with any persistent device identifier (for example: SSAID, MAC address, IMEI, etc.,) without the explicit consent of the user.
  • Upon reset, a new advertising identifier must not be connected to a previous advertising identifier or data derived from a previous advertising identifier without the explicit consent of the user.
  • The collection and use of the advertising identifier and commitment to these terms must be disclosed to users in a legally adequate privacy notification.

Google has released technical details for developers implementing the Advertising ID. Greg Sterling has also written a helpful post for MarketingLand summarizing the changes and providing more detail.

Other Privacy Features

Toggle Location On and Off More Easily

Users will be able to adjust their location settings more conveniently via a new tile in Quick Settings.

Enhanced Caller ID

One new feature of Android 4.4 is that the phone app will match incoming phone calls against Google’s various databases in order to display an automatic caller ID. This feature already works for businesses that use Google Places, but the service will be expanded next year to people as well.  This means that if an incoming caller has verified his or her phone number on their Google Account (and allowed the discovery feature), their name and profile photo will show up on the receiving caller’s phone even if the incoming call is not an existing contact.  Note that users can disable this feature by visiting their Google Account Settings page.

Device management built-in

Lost devices can be found or wiped remotely with the Android Device Manager.

We’re excited to see these features implemented and will be watching for new privacy-related updates from Google as more features are rolled out.

Leave a Reply


Privacy Calendar

Apr
24
Thu
all-day 6th Biannual International Surveillance & Society Conference
6th Biannual International Surve…
Apr 24 – Apr 25 all-day
The 6th Biannual International Surveillance & Society conference hosted by the University of Barcelona and supported by the Surveillance Studies Network is currently calling for [...]
12:00 pm Data Privacy in Education: Ensuring Student Security while Encouraging Innovation in K-12 Education @ Rayburn House Office Building, Room B-354
Data Privacy in Education: Ensur… @ Rayburn House Office Building, Room B-354
Apr 24 @ 12:00 pm – 1:00 pm
The Congressional E-Learning Caucus in cooperation with Into and the National Coalition for Technology in Education and Training presents a luncheon to discuss “Data Privacy [...]
Apr
29
Tue
all-day IAPP Europe Data Protection Intensive 2014
IAPP Europe Data Protection Inte…
Apr 29 – May 1 all-day
The IAPP Europe Data Protection Intensive features timely programming centred on the top issues impacting the European data protection community, with a focus on addressing [...]
Apr
30
Wed
5:30 pm InSecurity: Race, Surveillance and Privacy in the Digital Age @ New America Foundation
InSecurity: Race, Surveillance a… @ New America Foundation
Apr 30 @ 5:30 pm – 7:30 pm
Now more than ever, digital tools sit at a precarious tipping point, and many question whether they will be used to address pre-existing disparities, [...]
May
2
Fri
all-day Foreign Intelligence Surveillance in an Era of “Big Data” @ Jacob Burns Moot Court Room, George Washington Law School
Foreign Intelligence Surveillanc… @ Jacob Burns Moot Court Room, George Washington Law School
May 2 all-day
Discussions: Panel 1: Why Do We Conduct Foreign Intelligence Surveillance? What Are the Requirements? Panel 2: Making the Trade-Offs Between Surveillance and Civil Liberties Panel [...]
May
7
Wed
all-day IAPP Canada Privacy Symposium 2014
IAPP Canada Privacy Symposium 2014
May 7 – May 9 all-day
The IAPP Canada Privacy Symposium is the leading conference for education, debate and discussion of issues that matter most to Canadian privacy and data protection [...]
Jun
5
Thu
all-day Privacy Law Scholars Conference (7th Annual) @ The George Washington School of Law
Privacy Law Scholars Conference … @ The George Washington School of Law
Jun 5 – Jun 6 all-day
  UC Berkeley School of Law and The George Washington University Law School will be holding the seventh annual Privacy Law Scholars Conference (PLSC) on [...]
Jun
8
Sun
all-day Computers, Freedom, and Privacy 2014 Conference @ Airlie Center
Computers, Freedom, and Privacy … @ Airlie Center
Jun 8 – Jun 10 all-day
Mark your calendars! The 2014 Computers, Freedom, and Privacy Conference will be held June 8-10 at the Airlie Center in Warrenton, Virginia. The Airlie Center [...]

View Calendar