Mobile App Legal Compliance Check

Mobile apps often collect far more personal data than their owners realise: device identifiers, location, contacts, analytics events and advertising IDs. Under UK GDPR and the Data Protection Act 2018 you need a lawful basis, clear privacy information and appropriate security for all of it, and under the Privacy and Electronic Communications Regulations 2003 (PECR) you need consent before storing or accessing information on a user’s device, including through SDKs for analytics and advertising. The Data (Use and Access) Act 2025 has also updated some of these rules, so older consent flows may need revisiting.

Beyond data protection, apps selling digital content or in-app purchases are subject to the Consumer Rights Act 2015 and the Digital Markets, Competition and Consumers Act 2024, including rules on subscriptions, pricing transparency and refunds. If your app is likely to be accessed by children, the ICO’s Children’s Code applies. Apple’s App Store and Google Play also require accurate privacy disclosures (such as privacy nutrition labels and data safety sections), and mismatches are a common reason for apps being rejected or removed. Getting these basics right protects your users, your reputation and your distribution.

This check looks at how your mobile app handles personal data, device permissions, purchases and store disclosures, and flags the areas most likely to attract regulator or app store attention, with practical steps to fix them.