In an effort to provide more transparency and control over user data, Google has recently announced a new data deletion policy for Android apps. The policy mandates that developers of apps which allow for account creation must offer users the option to delete their accounts from both within the app and outside of it.
According to Bethel Otuteye, the senior director of product management for Android App Safety, developers are required to provide users with an in-app path as well as a web link resource to request app account deletion and associated data. The goal is to have a "readily discoverable option" for users to initiate an app account deletion process.
Additionally, the new policy allows users to selectively delete only portions of their data instead of entirely deleting their accounts. However, developers who wish to retain certain data for valid reasons such as security, fraud prevention, or regulatory compliance must disclose such data retention practices upfront.
It is important to note that temporary account deactivation, disabling, or 'freezing' the app account does not qualify as account deletion. Google's new policy is set to go into effect early next year, and developers have until December 7, 2023, to submit answers to new Data deletion questions in the app's Data safety form. Developers can file for an extension until May 31, 2024.
This move puts Android in line with Apple's iOS and iPadOS operating systems, which instituted a similar policy starting June 30, 2022, but does not require users to be able to delete their accounts via the web as well.
While the new policy sets out clear guidelines for developers, it remains to be seen if enforcement actions will be taken if a developer fails to follow the rules. Earlier this year, Mozilla called out Google after discovering serious discrepancies between the top 20 most popular free apps' privacy policies and the information they self-reported in the Play Store.