Google Play Data Safety & Permissions Audit

Audit any Android app's privacy in one row: what data it says it collects and shares, its security practices, every permission it requests, and a transparent risk score with the reasons behind it. Built on Google Play's Data safety labels, for bulk audits without opening a single store page.

What is the Google Play Data Safety & Permissions Audit?

Since 2022 every app on Google Play must publish a Data safety label describing what data it collects, what it shares with third parties and what security practices it follows. This Actor reads those labels and each app's permission list and turns them into an audit you can sort, filter and export. The risk score lists every reason with its points, so you can see exactly why an app rates LOW, MEDIUM or HIGH.

What makes it different?

• Transparent scoring. Every point comes with a plain-English reason, for example: Shares sensitive data with third parties: Location, Financial info. If a label cannot be read the result is UNKNOWN, never a guess.
• Labels and permissions together. The permission list shows what an app can access, and the label shows what it says it does with data.
• Bulk and filterable. Audit hundreds of apps and keep only MEDIUM or HIGH risk.
• Honest about limits. It reports what developers declared, not what the app actually does.

What data can you extract from the Data safety section?

Field	Example
riskLevel, riskScore, riskReasons	MEDIUM, 6, each reason with points
dataSharedWithThirdParties	Approximate location, Device or other IDs, with purposes
dataCollected	every collected data item with purpose and whether optional
encryptedInTransit, deletionRequestable	true, true
independentSecurityReview, familiesPolicy	false, false
permissionCount, sensitivePermissionTypes	28, Location, Contacts, Microphone
privacyPolicyUrl, installs, rating	policy link and basic app facts

A SUMMARY record lists how many apps were audited, which were not found, and how many fall into each risk level.

How to audit Android app privacy

1. Paste package names or Play Store URLs.
2. Optionally keep only MEDIUM or HIGH risk, and choose whether to include the full permission list.
3. Click Start.
4. Download JSON, CSV or Excel, or call the Actor from the API, a schedule, Make, n8n or Zapier.

{
    "apps": [
        "com.spotify.music",
        "org.thoughtcrime.securesms"
    ]
}

• minRisk: apps below this level are neither returned nor charged.
• includePermissions: the counts are always returned; the full list is optional.
• language / country: change the wording of labels and permission names.

How much does an app privacy audit cost?

You pay per app audited returned plus a very small start fee. There is no subscription.

Apps	Approximate cost
10	$0.20
100	$2
500	$10
1,000	$20

Paid Apify plans get tiered discounts, and you can set a maximum cost per run. You can try it on Apify's free plan without a card.

Who is it for?

• Privacy, compliance and security teams reviewing third-party SDKs and vendor apps.
• Investors and analysts doing due diligence on app companies.
• Journalists and researchers studying data practices across a category.
• App publishers benchmarking their own label against competitors.

Frequently asked questions

Is the risk score a legal or security verdict? No. It is a transparent heuristic over what the developer declared. A LOW score does not prove an app is safe, and a HIGH score does not prove it is abusive.

Why can the label disagree with the app's real behaviour? Developers write their own labels. Google reviews them but they can be incomplete or out of date.

What if an app has no readable Data safety label? The risk level is UNKNOWN and no score is given. An empty label can mean the developer has not published one or that Google's page could not be read, so guessing would be unfair. UNKNOWN apps are returned only when the minimum risk is Low.

Are apps that are not found charged? No. Only apps that are successfully audited are charged.

What if Google changes the page? The run fails with an explicit error instead of returning empty audits, and the Actor is health-checked every night.

Notes and limits

• Reads public Google Play pages through the maintained open-source google-play-scraper library. This Actor is not affiliated with Google.
• The scoring rules are fixed and listed in every row, so results are reproducible.