Overview

The Electronic Frontier Foundation is urging the Federal Trade Commission to launch a comprehensive privacy and security review of daycare apps, citing widespread flaws that put sensitive family and child data at risk. According to the EFF, these platforms should be subject to formal audits to identify security vulnerabilities and potential regulatory violations.

In its letter, the EFF points to the FTC’s own May 2022 policy statement, which emphasized the agency’s renewed commitment to enforcing children’s data protections—particularly in educational technology. The EFF contends this framework provides a strong legal basis for enforcement actions against app developers that fail to safeguard user data.

Key Concerns

Among the EFF’s top concerns is the lack of basic safeguards in many of these applications. The group recommends mandatory implementation of key protections, including end-to-end encryption for photographs, robust two-factor authentication, full transparency around embedded tracking tools, and secure cloud storage practices.

The urgency behind this request stems from the growing reliance parents have on digital tools to monitor their children’s activities in daycare settings. While these apps offer convenience, parents are often left with no alternative options and little control over how their child’s information is collected, stored, or shared. With no opt-out mechanisms and vague privacy disclosures, families are left vulnerable to data exploitation.

Insecure Storage of Sensitive Data
Children’s photos are frequently stored on cloud services without encryption, leaving them accessible to unauthorized parties 

Unclear Third-Party Tracking
Over half of the 42 tested apps employ trackers—collecting data such as diaper-change frequencies—without informing users CyberScoop

Biased Privacy Policies
Some apps forward data to platforms like Facebook through SDKs like Branch.io, yet omit such activity from privacy policies

Legal & Regulatory Gaps

• COPPA Limitations
  The Children’s Online Privacy Protection Act (COPPA) governs data collection for users under 13—but daycare apps, sourcing data via parents or providers, often evade its full scope Electronic Frontier Foundation

• Education Funding Loopholes
  While daycares funded by the Department of Education are tied to student privacy laws (FERPA), many private apps fall outside this realm. Users have little visibility into downstream data uses—including third-party disclosures or law enforcement releases

In its concluding remarks, the EFF stresses that most parents lack the technical insight and transparency needed to make informed decisions about app security. It has therefore asked FTC Chair Lina Khan to take immediate action to close loopholes in current regulations and prevent further misuse of children’s data in early childhood education.

The Electronic Frontier Foundation remains at the forefront of digital rights advocacy, pushing for stronger protections across the technology landscape.

“As parents don’t have the tools or proper information to assess privacy and security, the FTC should review gaps in the law and bolster protections for young children’s data,” the EFF asserts Electronic Frontier Foundation Their letter to FTC Chair Lina Khan urges swift action to close loopholes and prevent exploitation.

Source: Link