App Data Terminology Glossary: From Permissions to Privacy Labels

App Permission

An explicit request an app makes to access a specific feature or data on your device — such as your camera, contacts, or location. You can typically approve or deny each permission individually in your phone's settings.

Privacy Label

A standardized summary displayed on an app's store listing that describes what data the app collects and how it is used. Apple's App Store and Google Play both require developers to provide these disclosures.

Data Broker

A company that collects personal data from various sources — including apps, public records, and purchase histories — and sells or licenses that information to third parties, often without users' direct knowledge.

Tracker

Code embedded inside an app that monitors your behavior, such as which features you use, how long you stay on a screen, or where you go. Trackers are frequently used for advertising targeting and analytics.

First-Party Data

Information collected directly by the app or company you are interacting with — for example, your name and email address entered during sign-up. This is distinct from data gathered by third-party services embedded in the app.

Third-Party Data Sharing

When an app passes your personal data to an outside company, such as an ad network or analytics provider. This sharing may happen automatically in the background unless you opt out.

Opt-In vs. Opt-Out

Opt-in means you must actively agree before data is collected or shared. Opt-out means collection starts by default and you must take action to stop it. Opt-in is generally considered the more privacy-protective approach.

Fingerprinting

A tracking technique that identifies your device by combining technical details — such as screen size, browser version, and installed fonts — rather than relying on cookies or stored identifiers. It is difficult to block.

Sensitive Data

Categories of personal information that carry higher privacy risk, including health records, precise location, financial details, biometrics, and communications content. Many privacy laws give these categories extra protections.

Data Minimization

The practice of collecting only the data strictly necessary to provide a service, and no more. It is a core principle in major privacy regulations and a useful thing to look for in a developer's stated data practices.

Consent Banner

A pop-up or notice that asks for your agreement before an app or website uses cookies or tracking technologies. Required under laws such as the EU's GDPR, though increasingly common on U.S. platforms as well.

Privacy Policy

A legally required document explaining how an app collects, uses, stores, and shares your personal data. Policies vary widely in clarity; a short, plain-language policy is generally easier to evaluate than a lengthy legal document.