NHS-approved apps ‘leaking’ data, according to BBC

The apps, aimed at helping people to manage smoking and drinking, were included in the NHS England’s Health Apps Library. The Library represents apps that have been tested to ensure they meet standards of clinical and data safety.

However, after researchers discovered that vetting standards had missed some apps flouting privacy standards, the apps in question were removed from the library.

Kit Huckvale, PhD student at Imperial College London and co-writer of the study, said: “If we were talking about health apps generally in the wider world, then what we found would not be surprising.”

Huckvale said that given that the apps were supposed to have undergone rigorous vetting and approval tests, finding that most of them did not provide adequate protection of data was certainly a surprise.

The study involved looking at 79 different apps, which were all fed false information. The app was subsequently assessed to see how the information was handled and whether it was encrypted as regulations require it should.

70 apps were found to have sent data to associated online services, while 23 exchanged data without encrypting it. Four apps sent both personal and health data without protection from potential spying.

Mr Huckvale told the BBC that “The study is a signal and an opportunity to address this because the NHS would like to see strategic investment in apps to support people in the future”.

Security expert Ken Munro of Pen Test Partners said: “It's worrying information. Where insecure storage of personal data often fails is with developers not understanding the consequence of poor security practice."

NHS England said: “We were made aware of some issues with some of the featured apps and took action to either remove them or contact the developers to insist they were updated.

"A new, more thorough NHS endorsement model for apps has begun piloting this month.”

Read more

Event Diary

This story was first published in digitalhealth.net

Supplier Profiles

CDC success at Victoria Infirmary, Northwich creates ideal model for future patient pathway reforms

Northwich’s Victoria Infirmary (VIN) Community Diagnostic Centre (CDC) has enabled more patients

Gain valuable insight with Adveco for gas to electric decarbonisation projects

Adveco, the commercial hot water specialist, announces the launch of live metering of domestic ho