Trace your commute

Privacy disclosures, permissions and observed activity

What app privacy labels and activity reports actually show

Store privacy disclosures, permission dashboards and network reports answer different questions. Learn how their definitions and limits affect what can be concluded.

Sources checked .

Conceptual illustration

An App Store label describes declared practices

Apple says its App Store privacy information is self-reported by the developer. Data Linked to You concerns identifiers such as an account or device; Data Used to Track You has a more specific advertising and data-broker definition. A linked-data category does not, by itself, mean the data is being used for every possible purpose. Apple: App Store privacy categories and developer reporting

The disclosure definition of collection has boundaries

Apple's developer guidance defines collection in terms of off-device transmission and access lasting longer than needed to serve a request in real time. It includes third-party partners and lists narrow optional-disclosure conditions. An app accessing data locally is a different fact from that data meeting this disclosure definition. Apple: privacy-label definitions and disclosure conditions

Google Play uses definitions with specified exceptions

Google says Data safety summarizes versions distributed through Play, and actual practices can vary with use, region or age. Transfers to a developer's service provider, among other specified cases, need not appear as shared. An independent security review validates security practices, not the accuracy or completeness of the Data safety declaration. Google: reading Data safety and its exceptions

Third-party code belongs in the developer's review

Google requires developers to account for data handled through included third-party libraries or software kits. Developers remain responsible for complete, accurate declarations. Google reviews information during app review and can act on discrepancies. This is not the same thing as a record of every transaction from one person's phone. Google: developer responsibility, included third-party code and Play review

A contacted domain is one piece of activity evidence

Apple's App Privacy Report lists domains contacted directly by an app or through its content. A domain entry alone does not establish which personal fields were transmitted or why. Apple: App Privacy Report

Android's dashboard shows permission activity

Google's Android privacy dashboard identifies apps using permissions and when access occurred. Its help describes a seven-day view for Android 13 and a 24-hour view for Android 12. That permission timeline is a different kind of evidence from a store's disclosure. Google: privacy dashboard

Questions and answers

Does no disclosed sharing necessarily mean no transfer to any other company?

Google's Data safety rules include a service-provider exception and other specified cases. Google: reading Data safety and its exceptions

Does an Apple label's collection definition describe every on-device access?

Apple's developer definition specifically addresses off-device transmission and retention beyond the real-time request. Apple: privacy-label definitions and disclosure conditions

Does Google say store declarations have no review or enforcement?

Its guidance describes app review and possible action when discrepancies are found. Google: developer responsibility, included third-party code and Play review

Sources and scope

Public Apple and Google guidance checked 10-24-2026. Disclosure definitions, app use, version, region and device software affect interpretation.

Keep exploring