Google allowing Android app vendors to illegally collect user data, lawsuit alleges

Complaint, filed recently in California, is amended version of an earlier lawsuit against the company

Several users of devices running Google's Android operating system have filed an amended version of an earlier lawsuit accusing the company of illegally collecting, and allowing others to collect, extensive amounts of mobile user data without proper notice or consent.

The lawsuit, filed last week in the US District Court for the Northern District of California, is an updated version of a consolidated lawsuit from January 2012. It alleged that Google's actions had harmed the privacy, security and financial interests of the six named plaintiffs in the case.

US District Court Judge Jeffrey White, who reviewed the original complaint from last year, had rejected it this March.

In his ruling, the judge noted that the plaintiffs had failed to clearly state how Google's actions had caused injury to them as defined under the federal Computer Fraud and Abuse Act, the California Unfair Competition Law and a handful of other state statutes. Judge White had offered the plaintiffs an opportunity to file an amended complaint if they chose to do so.

Last week's second complaint addresses the shortcoming identified by the judge the first time around said William Audet, interim class counsel for the plaintiffs in the case.

"Pursuant to the Court's order, the plaintiffs have added additional facts on a number of issues," Audet said.

"The second amended complaint also provides additional facts regarding recent disclosures of continued alleged privacy violations by Google, including the sharing of data without the full consent or knowledge of the consumer," he said. "We believe that the complaint now addresses all the issues raised by the court and we are now focused on two violations -- one federal and one state -- committed by Google."

According to Audet, the ultimate goal in filing the lawsuit is to get Google to provide full disclosure of its own data collection practices and that of Android application developers who are approved to distribute their products through Google's application store. "We are alleging that the company is participating in the collection of private data in exchange for the use of applications by the consumer."

The 36-page complaint filed last week accuses Google of putting hooks in its Android operating system that allow third-party application developers to collect a extensive of range of data about mobile users and their devices. The complaint accuses Google of allowing third-party application developers to collect geo-location data, user age and gender, zip codes, user activity, device IDs and other personally identifying information from Android-powered mobile devices.

"People don't know how much data they are giving up when they download these applications for free," Audet said. He added that it is Google's responsibility to ensure that applications made available through its mobile application store are not illegally collecting and sharing user data.

Google's own privacy policies do not inform users of the extensive data collection practices of Android mobile application providers, he said. Often, users download these applications based on Google's representations in its privacy polices and its terms of service agreements, he said. Many users are unlikely to download third party applications if they were more fully informed about the true nature and the extent of the data being collected, he said.

The complaint also accuses Google of using its analytics tools and other services to collect extensive user information for targeted advertising purposes and for selling to third parties.

In addition, it accused Google of taking "affirmative steps" to limit the ability of users to block such data gathering and tracking. As an example, the complaint pointed to Google's alleged removal of an ad-blocking tool called AdBlock Plus, from its Google Play application store.

Such complaints are not unusual for Google or others like Facebook and Apple. All three companies have been fairly regular targets of consumer complaints alleging all sorts of privacy violations.

In the present instance, it remains unclear how far the lawsuit will go. Even Audet concedes the battle will be very tough. There's a level of detail and specificity involved in these privacy cases that can sometimes be hard to achieve, he said. Proving that the alleged data collection hurts consumers financially, or has injured them in a specific manner, can also be challenging, he said. "This is a hard case," he said.

A Google spokeswoman said on Wednesday that the company had no comment on the pending litigation.

News of the amended complaint was first reported by Courthouse News Service.

Jaikumar Vijayan covers data security and privacy issues, financial services security and e-voting for Computerworld. Follow Jaikumar on Twitter at @jaivijayan or subscribe to Jaikumar's RSS feed. His e-mail address is jvijayan@computerworld.com.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Show Comments

Blog Posts

5 cornerstones of a strong digital culture

Creating a strong company culture may sound like a daunting task, but it’s actually pretty straightforward. In fact, company culture is created in exactly the same fashion as a religion or democracy. Behaviours created from the organisation’s inception are reinforced over time by leadership, attracting like-minded people and eventually reaching critical mass to become an accepted ‘truth’.

Anthony Stevens

Founder and CEO, Digital Asset Ventures

Should you rebuild your company’s tech stack in blockchain?

The question I get asked most regularly these days is: ‘Do I need to rebuild my company’s systems on Blockchain?’ And the answer, every time, is ‘No, you’re asking the wrong question’.

Michelle O'Keeffe

CEO, Engaging.io

Customer value proposition: Getting the brand promise to your customers right

Throughout my career, I have witnessed a litany of brand names that profess to have a unique customer value proposition (CVP). In reality, however, they’ve had little more than a ‘value proposition’: A simple list of benefits applied to a general audience.

Ric Navarro

Global director of marketing and communications, Norman, Disney & Young

RE: Sales and marketing SLAs, often the choke point isn't the teams but them getting the data into the tools they want to use with the da...

Ed Fry

Why sales and marketing alignment is more important than ever

Read more

Thank you for the good and very helpful information. It is very interesting. I love all the things you share and see your beautiful creat...

รัตนาวดี ภูมิวรรณ

Former eHarmony marketing chief joins telco startup

Read more

Colin Kaepernick, not Mike Kapernick.

thisisw

Zenith's innovation leader: Mid-digital age not benefitting media, brands or consumers

Read more

AGA KHAN HOSPITAL is in need of kidney donors for the sum of 2 crore, Contact us today if you want to sell your kidney for money, and thi...

Sebastian Friedrich

Mindshare gets behind blockchain advertising alliance

Read more

WelcomeThe world 's coolest Mercedes companyI am a personal addict on this carBut poverty does not allow me to watch on YouTube for us po...

amer hassan

ASX-listed GrowthOps appoints inaugural CMO

Read more

Latest Podcast

More podcasts

Sign in