Beware: Your Mobile Health App may be selling your health data
Advertisement
LONDON: Some clinically-accredited smartphone health apps may be sending unencrypted personal and health information, putting the privacy of users at risk, a new study has found.
It is currently estimated that one and a half billion smartphone users have a health app installed and this number is set to treble in the next three years.
One quarter of US adults have reported using one or more health apps and a third of physicians have recommended an app to a patient.
As a way of reassuring users about the quality and safety of health apps, several app accreditation programmes have been launched.
One such programme is the UK's National Health System (NHS) Health Apps Library, which is a curated list of apps for patient and public use.
Registered apps undergo an appraisal process that examines clinical safety and compliance with data protection law.
The researchers from Imperial College London, UK, and Ecole Polytechnique CNRS, France, reviewed 79 apps that were listed on the UK NHS Health Apps Library in July 2013.
The apps covered health areas such as weight loss, alcohol harm reduction, smoking cessation and long-term condition self-care.
The apps were assessed over a six-month period by inputting simulated information, tracking the handling of this information, and looking at how this agreed with any associated privacy policies.
Of the apps reviewed, it was found that 70 of the apps transmitted information to online services and 23 of those sent identifying information over the internet without encryption.
Of the 38 apps that had a privacy policy and transmitted information, the privacy policy did not state what personal information would be included in the transmissions.
Four apps were found to be sending both identifying and health information without encryption.
"Our study suggests that the privacy of users of accredited apps may have been unnecessarily put at risk, and challenges claims of trustworthiness offered by the current national accreditation scheme being run through the NHS," said lead researcher Kit Huckvale, from Imperial College London.
"The results of the study provide an opportunity for action to address these concerns, and minimise the risk of a future privacy breach," said Huckvale.
The study was published in the journal BMC Medicine.
It is currently estimated that one and a half billion smartphone users have a health app installed and this number is set to treble in the next three years.
One quarter of US adults have reported using one or more health apps and a third of physicians have recommended an app to a patient.
As a way of reassuring users about the quality and safety of health apps, several app accreditation programmes have been launched.
One such programme is the UK's National Health System (NHS) Health Apps Library, which is a curated list of apps for patient and public use.
Registered apps undergo an appraisal process that examines clinical safety and compliance with data protection law.
The researchers from Imperial College London, UK, and Ecole Polytechnique CNRS, France, reviewed 79 apps that were listed on the UK NHS Health Apps Library in July 2013.
The apps covered health areas such as weight loss, alcohol harm reduction, smoking cessation and long-term condition self-care.
The apps were assessed over a six-month period by inputting simulated information, tracking the handling of this information, and looking at how this agreed with any associated privacy policies.
Of the apps reviewed, it was found that 70 of the apps transmitted information to online services and 23 of those sent identifying information over the internet without encryption.
Of the 38 apps that had a privacy policy and transmitted information, the privacy policy did not state what personal information would be included in the transmissions.
Four apps were found to be sending both identifying and health information without encryption.
"Our study suggests that the privacy of users of accredited apps may have been unnecessarily put at risk, and challenges claims of trustworthiness offered by the current national accreditation scheme being run through the NHS," said lead researcher Kit Huckvale, from Imperial College London.
"The results of the study provide an opportunity for action to address these concerns, and minimise the risk of a future privacy breach," said Huckvale.
The study was published in the journal BMC Medicine.
Our comments section is governed by our Comments Policy . By posting comments at Medical Dialogues you automatically agree with our Comments Policy , Terms And Conditions and Privacy Policy .
Disclaimer: This website is primarily for healthcare professionals. The content here does not replace medical advice and should not be used as medical, diagnostic, endorsement, treatment, or prescription advice. Medical science evolves rapidly, and we strive to keep our information current. If you find any discrepancies, please contact us at corrections@medicaldialogues.in. Read our Correction Policy here. Nothing here should be used as a substitute for medical advice, diagnosis, or treatment. We do not endorse any healthcare advice that contradicts a physician's guidance. Use of this site is subject to our Terms of Use, Privacy Policy, and Advertisement Policy. For more details, read our Full Disclaimer here.
NOTE: Join us in combating medical misinformation. If you encounter a questionable health, medical, or medical education claim, email us at factcheck@medicaldialogues.in for evaluation.