Privacy Labels vs. App Store Ratings: Which Should You Trust?

What Each Signal Actually Measures

When you land on an app's store page, two numbers compete for your attention: the star rating and, if you scroll down, the privacy label. They look equally authoritative, but they measure completely different things.

App Store Privacy Labels — introduced by Apple in 2020 and expanded on Google Play as the Data Safety section in 2022 — are structured disclosures that describe the categories of data an app collects. Think of them like nutrition labels for your personal information. They're organized into buckets such as "data used to track you," "data linked to you," and "data not linked to you." For a plain-language explanation of those terms, see our app data terminology glossary.

Star ratings, on the other hand, are aggregated scores from user reviews. They measure satisfaction — did the app do what the user expected, crash less than rivals, or update responsibly? They say nothing about data handling.

The Reliability Problem with Each

Neither metric is airtight, and understanding why matters before you rely on either one.

Privacy labels are self-reported. Developers fill in their own disclosures, and neither Apple nor Google independently audits every submission for accuracy. Research from academic institutions has found discrepancies between what some labels claim and what apps actually do — though both platforms have policies that can penalize inaccurate filings. The label gives you a starting point, not a guarantee.

Star ratings are crowd-sourced and gameable. Apps have historically used in-app prompts timed to moments of delight (right after you win a game level, for example) to solicit positive reviews. Some developers have used incentivized rating campaigns. Ratings also skew toward engaged, loyal users — people who quietly uninstalled in frustration rarely leave reviews. A 4.8-star rating tells you satisfied users exist; it doesn't tell you about the ones who left.

The practical upshot: treat both as signals worth considering, not verdicts worth trusting blindly. Layer them with a quick permissions check — what app permissions actually mean walks through exactly what to look for.

How to Read Them Together — Practically

The most useful approach is to use both signals in sequence, not as alternatives.

1. Check the privacy label first. Look specifically at the "Data Used to Track You" row. If an app collects location, browsing history, or purchase history for advertising, decide whether that trade-off makes sense for you. Our article on privacy trade-offs can help you think through that exchange.
2. Scan recent written reviews. Sort by most recent, not most helpful. Look for patterns: repeated complaints about unexpected charges, aggressive data requests, or sudden behavior changes after an update are meaningful signals.
3. Review the permissions at install time. The label tells you what data is collected; the permission prompt tells you what the app is asking your device to share. If a flashlight app requests your contacts, that mismatch is a red flag regardless of its star rating.

For a deeper walkthrough of settings to adjust after installation, see app privacy settings you should review. And if a developer's privacy label raises questions, the app's full privacy policy — daunting as it looks — often clarifies what's actually shared with third parties. Our guide on reading a privacy policy without losing your mind shows which sections matter most.