Privacy Watchdog Brings Popular Exercise and Healthcare Apps into Compliance with Digital Advertising Best Practices

For Immediate Release 

Arlington, VA – July 8, 2020 – BBB National Programs’ privacy watchdog, the Digital Advertising Accountability Program (DAAP), today released two new data privacy cases for popular mobile apps from GoodRx and Rock My World, issuing recommendations and outlining actions taken to date to bring these companies into compliance with the Digital Advertising Alliance’s Self-Regulatory Principles.

As a result of DAAP’s in-house technical monitoring of the mobile app marketplace and the open web, GoodRx, the creator of the eponymous price-tracking app that offers free prescription prices and coupons, and Rock My World, the publisher of the music and exercise app Rock My Run, each updated their privacy disclosures to meet interest-based advertising data privacy requirements.  

DAAP identified digital ad companies on the GoodRx website collecting cookie data for possible interest-based advertising purposes. DAAP extended its network traffic analysis of GoodRx to its app and found that mobile device identifiers were collected by third-party ad partners of GoodRx. At this point DAAP reached out to GoodRx, informing the app creator of steps it would need to take to make these practices compliant and fair to website and app users.  

GoodRx swiftly implemented all DAAP’s recommendations to make information about its privacy practices more accessible, including:  

  •  Incorporating an up-front “enhanced notice” link on every page where third parties collect cookie data on GoodRx’s website, which leads directly to a description of this activity and a link to industry-developed opt-out tools.  

  • Adding a jump link to the top of its privacy policy that mobile device users can follow to learn more about GoodRx’s advertising practices.  

  • Adding a statement of adherence to the DAA Principles to its privacy disclosures. 

 

DAAP conducts testing of popular mobile apps available on major platforms, sending letters to app publishers where it finds a gap in compliance with best privacy practices. After receiving a DAAP inquiry letter about third parties collecting mobile device identifiers through its app, Rock My World followed DAAP’s recommendations to comply with behavioral advertising data privacy requirements.  

Rock My World updated its privacy policy to add a notice about targeted advertising that includes a privacy opt-out tool and ensured that users receive “enhanced notice” of third-party data collection by adding a jump-link to the top of its privacy policy pointing users to this disclosure. In addition, Rock My World disabled the collection of precise location data from its app to ensure that third parties do not receive this sensitive data.  

Today’s case release represents DAAP’s 119th public action since the program began its self-regulatory mission in 2011. 

 

Subscribe to the Ad Law Insights or Privacy Initiatives newsletters for an exclusive monthly analysis and insider perspectives on the latest trends and case decisions in advertising law and data privacy.

 

 

 

 

Latest Decisions

Decision

Direct Selling Self-Regulatory Council Recommends Valentus Discontinue Earnings and Product Performance Claims

McLean, VA – December 23, 2024 – The Direct Selling Self-Regulatory Council (DSSRC) recommended Valentus, a direct selling company that sells nutritional and lifestyle products, discontinue earnings and health-related product performance claims made on social media and on the Valentus website.

Read the Decision Summary
Decision

Direct Selling Self-Regulatory Council Refers Olive Tree Earnings Claims to the FTC and California AG for Possible Enforcement Action

McLean, VA – December 20, 2024 – The Direct Selling Self-Regulatory Council (DSSRC) referred Olive Tree to the Federal Trade Commission (FTC) and California Attorney General's Office for possible enforcement action after Olive Tree failed to respond to a DSSRC inquiry into earnings claims.  

Read the Decision Summary
Decision

Children’s Advertising Review Unit Recommends JustPlay Discontinue or Modify Daisy the Yoga Goat Claims

New York, NY – December 19, 2024 - The Children’s Advertising Review Unit (CARU) launched an investigation into advertising for Just Play’s furReal Daisy the Yoga Goat seeking to determine if the toy’s product packaging and commercial advertisements comply with CARU’s Self-Regulatory Guidelines for Children’s Advertising.

Read the Decision Summary
Decision

In National Advertising Division Fast-Track SWIFT Challenge, Oral Essentials Voluntarily Modifies “Made in USA” Claims

New York, NY – December 19, 2024 – In a National Advertising Division challenge, Oral Essentials agreed to permanently modify its claim that certain Oral Essentials oral healthcare products are “Made in USA.” 

Read the Decision Summary