Google may collect information about your device's network connections, potentially malicious URLs, your operating system, and all apps installed on your device for security purposes. Even if you disable some protections, Google may still receive information about apps installed from Google Play.
This analysis describes what Google Play Store's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Google collects a broad set of device-level data including all installed applications, not just those from Google Play, for security analysis purposes, and some data collection continues even after a user opts out of certain protections.
Interpretive note: The extent to which data collection continues after disabling some protections is described in general terms, and the precise scope of residual collection is not fully specified in the document.
The updated terms establish two new financial obligations for subscription users. First, Google may charge your payment method up to 48 hours before the start of a billing period, rather than 24 hours as previously stated. Second, the revised terms now explicitly state that if a subscription charge fails and you have not cancelled, you remain responsible for the uncollected amount, and Google may attempt to charge a backup payment method. This may alter your billing dates and the timing of when you are billed each period. Additionally, users are now explicitly liable for any background data fees incurred by Google system services and content updates, including when the device screen is locked. You can review your subscription settings in Google Play to monitor billing schedules and update payment methods.
View change record →Users' complete list of installed applications, network connection information, and operating system data may be collected and analyzed by Google under the malware protection provision, and disabling some protections does not fully stop data collection about apps installed via Google Play.
How other platforms handle this
to lodge a complaint with the data protection authority in your jurisdiction.
You can always contact your local data protection authority if you have concerns regarding your rights under local law.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"Để bảo vệ bạn khỏi phần mềm độc hại từ bên thứ ba, URL độc hại và các sự cố bảo mật khác, Google có thể nhận thông tin về kết nối mạng trên Thiết bị của bạn, các URL có thể độc hại, hệ điều hành và các ứng dụng được cài đặt trên Thiết bị của bạn thông qua Google Play hay từ các nguồn khác. Bạn có thể chọn vô hiệu hóa một số tính năng bảo vệ này trong cài đặt trên Thiết bị của mình. Tuy nhiên, Google có thể tiếp tục nhận thông tin về các ứng dụng được cài đặt qua Google Play và các ứng dụng được cài đặt trên Thiết bị của bạn từ các nguồn khác có thể tiếp tục được phân tích về các vấn đề bảo mật mà không cần gửi thông tin đến Google.Excerpt from Google Play Store's Google Play Terms
REGULATORY LANDSCAPE: This provision engages GDPR regarding the lawful basis for collecting device-level data including installed application inventories, which may constitute personal data in the EU.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Google collects a broad set of device-level data including all installed applications, not just those from Google Play, for security analysis purposes, and some data collection continues even after a user opts out of certain protections.
Users' complete list of installed applications, network connection information, and operating system data may be collected and analyzed by Google under the malware protection provision, and disabling some protections does not fully stop data collection about apps installed via Google Play.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google Play Store.