4 ms·

Hold public audits by a trusted 3rd party to show you are not keeping any data - on a repeating basis (6 months?)

• jivings 8y ago
  We're already required to perform an audit by Google every 12 months (I've mentioned the requirements of this below, but it basically amounts to the same thing), would this be acceptable?
  • gnicholas 8y ago
    What are the details of this? I've seen how things work on the Chrome Store side, and it's completely haphazard. There isn't an official audit schedule, as far as I can tell, but like with the iOS App Store, they do sometimes decide to flag/remove an extension for completely bogus reasons, with little/no notice: https://medium.com/@BeeLineReader/google-yanked-my-chrome-extension-this-sunday-d9c481e285cb https://medium.com/@BeeLineReader/google-yanked-my-chrome-ex...
    • jivings 8y ago
      As of this year with apps that access the Gmail API it is an official audit by an authorised third party assessor. More info here: https://cloud.google.com/blog/products/g-suite/elevating-user-trust-in-our-api-ecosystems https://cloud.google.com/blog/products/g-suite/elevating-use...
      • gnicholas 8y ago
        That's great. I'd emphasize this both in the privacy policy and in the FAQ. It's not bulletproof, but it goes a long way.