3.1 Downloadable and web-based apps
Where researchers install apps on mobile interactive devices or when the research requires the use of webbased
apps, they must obtain consent and offer respondents an appropriate channel and mechanism for
giving permission and a place where they can read more about the relevant privacy policy. Researchers
must also disclose to potential participants the purpose of the app, the specific data it collects or uploads,
and any impact it may have on the functioning on other installed apps or the performance of the device in
general. To the maximum extent possible researchers should ensure that any app required as part of the
research does not:
• Install software that modifies the mobile settings beyond what is necessary to conduct research and
does not cause any conflicts with operating systems or cause other installed software to behave
erratically or in unexpected ways;
• install software that is hidden within other software that may be downloaded or that is difficult to
uninstall;
• install software that delivers advertising content, with the exception of software for the purpose of
advertising testing;
• install upgrades to software without notifying users and giving the participant the opportunity to opt
out;
• create a risk of exposing personal data during data transmission or storage;
• change the nature of any identification and tracking technologies without notifying the user; or
• fail to notify the user of privacy practice changes relating to upgrades to the software.
Researchers who deploy tracking technologies for research must also be proactive in managing distribution
of the software and vigorously monitor their distribution channel and look for signs that suggest unusual
events such as high churn rates.