Home Diabetes and Endocrinology Study Raises Privacy Concerns for Health Care Apps

Study Raises Privacy Concerns for Health Care Apps

Many have no policies, and may share data with third parties, researchers say

THURSDAY, March 10, 2016 (HealthDay News) — Privacy policies for health programs — or “apps” — designed for smartphones that share highly sensitive medical information between patients and doctors are lacking, and often are completely missing, according to a study published in the March 8 issue of the Journal of the American Medical Association.

Sarah Blenner, J.D., M.P.H., of the Illinois Institute of Technology Chicago-Kent College of Law in Chicago, and colleagues focused on 211 diabetes-specific apps available for download in mid-2014 on Google Play. Blenner and her associates noted that Google Play mandates that all apps post a point-of-sale list of information-handling “permissions” that consumers must agree to before downloading, whether or not they’re actually read.

Among the apps studied, these permissions included: tracking patient location (nearly 18 percent); remotely activating a user’s microphone or camera (about 4 and 11 percent, respectively); and modifying or deleting stored information (64 percent). The study authors also found that about 80 percent of the apps actually had no declared privacy policy of any kind. And of the roughly 20 percent that did have a privacy policy, patient privacy protection was very often not the main focus, the researchers said.

Among 65 apps randomly selected by the research team, more than 86 percent placed tracking “cookies” on users’ phones to monitor sensitive health information (such as insulin levels) that could be easily shared with third parties. More than three-quarters shared such information, whether or not they had a privacy policy in place, the investigators found. “Consumers really need to understand what an app developer’s privacy practice is before downloading and using these apps,” Blenner told HealthDay. “Because once their medical information is leaked, they can’t ever regain control over it.”

Full Text (subscription or payment may be required)

Copyright © 2016 HealthDay. All rights reserved.