Published on <a href="https://blog.prototypr.io/privacy-a-quick-overview-for-app-designers-5b98d2ac05cc?source=rss----eb297ea1161a---4">| Prototyping: From UX to Front End &mdash; Medium</a> Brian Pagán <img alt="" src="https://cdn-images-1.medium.com/max/1024/1*IyK4RB-vJuPTcL0Kcs987g.png">
I feel like app designers’ attitudes on privacy have gone from 🤨 to 😒 &amp; lately to 😳.
It’s ok: 😌 here’s what you need to know.
Summary (TL;DR)
<ul>
<li>Privacy isn’t scary: it’s an opportunity to earn people’s trust.</li>
<li>This is about how we handle personal data.</li>
<li>Some data are sensitive, and we need explicit consent before collecting them.</li>
<li>System permissions for apps are not the same as explicit consent.</li>
<li>Everyone is entitled to certain privacy rights: to be informed (Notice), to see the data we collect (Access), to take their data elsewhere (Portability), and to have their data corrected or deleted (Right to Be Forgotten).</li>
<li>Here are some design patterns we can use to respect people’s privacy in our mobile apps.</li>
</ul>
By the way, I don’t claim to be an expert… This is stuff I learned from working on mobile health apps, advice from experts, books, articles, &amp; my own (cursory) review of:
<ul>
<li><a href="https://www.gpo.gov/fdsys/pkg/PLAW-104publ191">HIPAA (Health Insurance Portability &amp; Accountability Act)</a></li>
<li><a href="https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en">GDPR (EU General Data Protection Regulation)</a></li>
<li><a href="https://www.privacyshield.gov/welcome">EU-U.S. and Swiss-U.S. Privacy Shield Frameworks</a></li>
</ul>
<h3>Personal vs. Sensitive Data</h3>
As the title suggests, privacy deals with two broad categories of data. Personal data refers to any information that can identify a person. Sensitive data refers to a subset of personal data that leave a person especially vulnerable to discrimination or harassment. When in doubt, assume data are sensitive. 😉
<blockquote>Collecting sensitive data requires explicit consent, i.e. opt-in.</blockquote>
Sensitive data include types that reveals information like:
<ul>
<li>Religion</li>
<li>Racial or Ethnic origin</li>
<li>Sexual orientation</li>
<li>Political affiliations</li>
<li>Criminal history</li>
<li>Union memberships</li>
<li>Genetics</li>
<li>Biometrics</li>
<li>Medical history</li>
</ul>
<h3>Asking for Explicit Consent</h3>
So, we understand that we need explicit consent before collecting a person’s sensitive data. And the principle of informed consent means that people need to understand what they’re consenting to. We usually give people this information in a privacy notice.
<ul>
<li>Our privacy policy is how we agree to handle data.</li>
<li>A privacy notice tells people about our privacy policy.</li>
</ul>
Since privacy notices tend to be long and difficult, we can use a short-form privacy notice. It’s a brief, understandable summary of your privacy policy.
<img alt="" src="https://cdn-images-1.medium.com/max/600/0*7T4JFuqy_feYDn9c.png">
I worked with this pattern at Philips, because the apps I worked on there collect medical data. Here’s an example for onboarding people to a fictitious baby health app.
As you can see, the screen summarizes the most important points of the privacy policy and links to the full privacy notice. And it’s opt-in: the toggles are off by default, and the I Agree button doesn’t appear until at least one toggle is switched on.
<img alt="" src="https://cdn-images-1.medium.com/max/1000/0*-hB-_LGgtk9NoPmw.png">
Using this pattern does interrupt a person’s flow in using the app. But sharing sensitive data carries some serious risk, so it’s in a person’s best interest to stop &amp; think for a moment about what’s happening. In that sense, this is the opposite of <a href="https://darkpatterns.org/">dark patterns</a>.
That doesn’t mean we can’t make it a little easier or more fun! It’s an opportunity to establish trust, highlight the app’s value, and express your service’s personality. We can use techniques like motion to assist people as well.
<img alt="" src="https://cdn-images-1.medium.com/max/320/0*hkoTTkOV0cBp1Of1.gif">
<h3>Permissions vs. Consent</h3>
Please allow me to bust the most common myth I’ve seen around privacy for apps: Asking for system permissions (Allow “App” to access your location?) is not the same as asking for consent.
<img alt="" src="https://cdn-images-1.medium.com/max/1000/0*eCXZY0oGDIbAZuLv.png">
Permissions are your operating system, asking if you trust the app in question. But consent represents an agreement between the person sharing data and the people collecting them.
<blockquote>Informed consent requires that people understand what they’re consenting to.</blockquote>
So what does informed consent really mean? Let’s take a quick look at people’s privacy rights.
<h3>Privacy Rights</h3>
You and I, as well as the people who use the things we create, have a legal right to privacy. While specific laws apply depending on where people live, here’s a rundown of the most important rights we need to respect when collecting data.
<h3>Right to Notice</h3>
People have the right to know:
<ul>
<li>Which types of data we’re collecting</li>
<li>Why we’re collecting the data (purpose)</li>
<li>Who else (3rd parties) will get the data &amp; why</li>
<li>How to have their data corrected or erased</li>
</ul>
<h3>Right to Access</h3>
We need to make sure people can access all the data we have about them, for free and in a digital format.
When we analyze people’s data (like with machine learning algorithms), they also have the right to know the processing logic &amp; any consequences from being profiled. This is especially important when <a href="https://splinternews.com/an-algorithm-used-by-police-to-predict-crime-flagged-bl-1793856964">an algorithm decides how long you should go to jail</a>.
<h3>Right to Portability</h3>
A person must be able to transfer their data from one place to another. So the data need to be made available “in a structured, commonly used, machine-readable and interoperable format. (<a href="http://eur-lex.europa.eu/eli/reg/2016/679/oj">GDPR</a>)”
<h3>Right to Erasure</h3>
A person also has the right to have their personal data corrected or deleted. They can withdraw any given consent, and sometimes any links to personal data must also be deleted (Right to Be Forgotten).
This presents a challenge for systems that rely on blockchain. Because it’s immutable, data on a blockchain can’t be deleted. <a href="http://d3e.co/ib">Opinions differ</a> as to how this challenge should be addressed.
Full disclosure: some of my clients work with blockchain. And I believe that we need to adapt technology to our human rights, not the other way around.
<h3>Our Responsibilities</h3>
We know that revealing a person’s sensitive data could get them fired from their job, dropped from their insurance, or even arrested. But even seemingly “innocent” data can be harmful. Revealing a person’s name &amp; date of birth leaves them <a href="http://www.crimedoctor.com/identity.htm">vulnerable to identity theft</a>, so we have important responsibilities.
<h3>Collect only what you really need.</h3>
An appalling number of people still insist on collecting people’s birth dates. But the risk of someone opening a credit card in my name far outweighs the benefit of getting that “happy birthday” spam marketing e-mail from your company. So collect only what you really need, and destroy any data as soon as it’s no longer needed.
<h3>Keep people informed.</h3>
Informed consent means always knowing what you’ve consented to, especially when that changes. As a product evolves, you may want to start collecting new data, or find a new purpose for data you’re already collecting.
<img alt="" src="https://cdn-images-1.medium.com/max/600/0*_o_5DPvG2d2dvlvM.png">
That’s ok, but when we make changes, we need to let people know. And if we want to collect more sensitive data, or change how we use sensitive data we already have, we need to ask for explicit consent again.
Here’s a version of the short-form privacy notice, adapted to ask for new data.
<img alt="" src="https://cdn-images-1.medium.com/max/1000/0*vKazY_FCKeEcwEUl.png">
<h3>Let people correct &amp; delete their data.</h3>
People own their personal data, so they have a right to have it corrected or deleted whenever they want. Most companies require that you contact them to manage your data, but some provide in-app controls that allow you to do it yourself.
The <a href="https://www.apple.com/ios/health/">Health</a> app on iOS does this nicely by allowing people to view and delete their data within the interface.
<img alt="" src="https://cdn-images-1.medium.com/max/1000/0*QTBzknkb-2NfHjDQ.png">
<h3>What Now?</h3>
So there it is, what every app designer needs to know about privacy. 😎
There’s much more out there of course; engineers and business stakeholders have other things to think about as well. But we’re also customers and citizens, so we need to think about our own privacy.
<blockquote>Empower people, don’t exploit them.</blockquote>
There are lots of principles out there for “privacy by design,” and with the GDPR coming into force next month, there are plenty of consultants offering advice. But the main thing to remember is: be cool, not 💩. Treat people with respect.
<h3>Special Thanks</h3>
My journey into the world of privacy started with <a href="https://www.linkedin.com/in/bram-hoovers-41900219">Bram Hoovers</a> and <a href="https://www.linkedin.com/in/almar">Almar van der Krogt</a>. We started around 2015 working together on the first privacy guidelines for mobile apps at Philips, and I’ve been hooked ever since. Thanks, gentlemen!
And thank you, <a href="https://uxenzo.com/">Hester Bruikman-Pagán</a> for your time and feedback! 😍
<h3>Further Reading</h3>
<a href="https://www.amazon.com/Privacy-How-Back-Curious-Reads/dp/1912475014/">Privacy: And How to Get It Back</a> (Great book) — B. J. Mendelson
<a href="https://2017.ind.ie/ethical-design/">Ethical Design Manifesto</a> (I follow this) — Indie
<a href="https://medium.com/@cennydd/a-techies-rough-guide-to-gdpr-c8d4b4eb2b3b">A Technie’s Rough Guide to GDPR</a> (More on the law) — Cennydd Bowles
<a href="https://www.popsci.com/apple-figure-out-popular-emojis-differential-privacy">Here’s how Apple can figure out which emojis are popular</a> (Differential Privacy) — Rob Verger
<a href="https://www.buzzfeed.com/azeenghorayshi/grindr-hiv-status-privacy">Grindr Is Letting Other Companies See User HIV Status And Location Data</a> (Privacy is important!) — Azeen Ghorayshi
<iframe src="https://cdn.embedly.com/widgets/media.html?src=https%3A%2F%2Fupscri.be%2Ff51076%3Fas_embed%3Dtrue&amp;dntp=1&amp;url=https%3A%2F%2Fupscri.be%2Ff51076%2F&#038;image=https%3A%2F%2Fe.enpose.co%2F%3Fkey%3DdRXnS9Gplk%26w%3D700%26h%3D425%26url%3Dhttps%253A%252F%252Fupscri.be%252Ff51076%252F%253Fenpose&amp;key=d04bfffea46d4aeda930ec88cc64b87c&amp;type=text%2Fhtml&amp;schema=upscri" width="800" height="400" frameborder="0"><a href="https://medium.com/media/b85dfbb5286d8a25cf2e754b9462cf45/href">https://medium.com/media/b85dfbb5286d8a25cf2e754b9462cf45/href</a></iframe><img src="https://medium.com/_/stat?event=post.clientViewed&amp;referrerSource=full_rss&amp;postId=5b98d2ac05cc" width="1" height="1" alt="stat?event=post.clientViewed&amp;referrerSou">
<hr>
<a href="https://blog.prototypr.io/privacy-a-quick-overview-for-app-designers-5b98d2ac05cc">Privacy: A Quick Overview for App Designers</a> was originally published in <a href="https://blog.prototypr.io">Prototypr</a> on Medium, where people are continuing the conversation by highlighting and responding to this story.

Privacy: A Quick Overview for App Designers

Top Stories