Question

My app has a special reporting feature. So when a user wants to report something via my app, which user’s and phone’s data I must not take and send to my web service?

The data I am referring to ranges from Contacts to phone’s unique ID, etc.

I need these regulations for Android and iOS as well.

Thanks

Answer 1

As a rule of the thumb, you should never send personal data like email IDs, locations, contacts, messages etc. unless you absolutely have to. And if you do have to, you should explicitly take the user’s permission before doing so, by showing a dialog or something. Simply putting a line like this app may access and store personal data remotely in your description is usually not enough, as a good amount of people never read the description fully.

On the other hand, phone IDs like IMEIs and MAC addresses are pretty standard identification techniques, and are used by ad networks etc. anyways, so you generally don’t need to bother telling the user about their collection explicitly.