Google updates Chrome Web Store user data policy, will remove violating apps and extensions on July 15, 2016

Google today updated its User Data Policy for the Chrome Web Store to “ensure transparent use of the data in a way that is consistent with the wishes and expectations of users.” The company has already started notifying developers and is giving them three months to comply: Starting on July 15, 2016, apps and extensions that violate any of the policies will be removed from the Chrome Web Store. The only way to be reinstated will be to comply with the new policies.

The new policies are much what you would expect when attempting to protect user data. Developers are being told they need to be transparent about the handling of user data, disclose privacy practices, post a privacy policy, and use encryption when handling personal or sensitive information. Even when the use of the data isn’t related to a key feature, the app or extension must ask the user to consent to the collection of personal or sensitive data via a prominent disclosure. The collection of web browsing activity when it’s not required for an item’s main functionality is unsurprisingly prohibited.

In short, Google has reached the point where a critical mass of Chrome apps and extensions require accessing user data to function. The company wants to ensure Chrome users are aware of what’s happening when they use these third-party services that rely on its browser. “Protecting our users is our key priority, and we believe this change will make sure users are better informed and allow them to choose how their user data is handled,” Google said.

This move follows Google’s other efforts to clean up its Chrome ecosystem. Last year, the company blocked all extensions not listed in the Chrome Web Store and disabled deceptive inline installation of Chrome extensions.

For more information, Chrome app and extension developers should read the full Developer Program Policies and the FAQ.