# Are iPhones Really Better for Privacy? Comparative Study of iOS and Android Apps

arXiv: https://arxiv.org/abs/2109.13722 · HTML: https://mlsanity.com/paper/2109.13722/

## Key facts

- Cited by 6 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 28 Sep 2021.

## Built on by (most cited first, 6 of 6)

- [Mind-proofing Your Phone: Navigating the Digital Minefield with GreaseTerminator](https://mlsanity.com/paper/2112.10699/) (2021)
- [GreaseVision: Rewriting the Rules of the Interface](https://mlsanity.com/paper/2204.03731/) (2022)
- [Word-level Annotation of GDPR Transparency Compliance in Privacy Policies using Large Language Models](https://mlsanity.com/paper/2503.10727/) (2025)
- [ROI: A method for identifying organizations receiving personal data](https://mlsanity.com/paper/2204.09495/) (2022)
- [Acoustic Cybersecurity: Exploiting Voice-Activated Systems](https://mlsanity.com/paper/2312.00039/) (2023)
- [Enabling Multilingual Privacy Policy Audits: Large-Scale Analysis of Spanish Mobile Apps](https://mlsanity.com/paper/2607.18424/) (2026)

## Abstract (arXiv)

While many studies have looked at privacy properties of the Android and Google Play app ecosystem, comparatively much less is known about iOS and the Apple App Store, the most widely used ecosystem in the US. At the same time, there is increasing competition around privacy between these smartphone operating system providers. In this paper, we present a study of 24k Android and iOS apps from 2020 along several dimensions relating to user privacy. We find that third-party tracking and the sharing of unique user identifiers was widespread in apps from both ecosystems, even in apps aimed at children. In the children's category, iOS apps tended to use fewer advertising-related tracking than their Android counterparts, but could more often access children's location. Across all studied apps, our study highlights widespread potential violations of US, EU and UK privacy law, including 1) the use of third-party tracking without user consent, 2) the lack of parental consent before sharing personally identifiable information (PII) with third-parties in children's apps, 3) the non-data-minimising configuration of tracking libraries, 4) the sending of personal data to countries without an adequate level of data protection, and 5) the continued absence of transparency around tracking, partly due to design decisions by Apple and Google. Overall, we find that neither platform is clearly better than the other for privacy across the dimensions we studied.