Alarming Report Exposes 1,248 APAC-Based Mobile Apps Violating Child Privacy Laws, Putting 117 Million U.S. Kids at Risk
A shocking new report from Pixalate, released on December 7, 2025, reveals a disturbing trend in the mobile app landscape. Their Q3 2025 State of Children’s Privacy Risk Report for Asia-Pacific (APAC) Mobile Apps uncovers a staggering 1,248 apps registered in the APAC region, available on both the Google Play Store and Apple App Store, that are likely violating the Children’s Online Privacy Protection Act (COPPA). These apps, collectively used by over 117 million individuals in the U.S., many of whom are likely children, are accused of unlawfully collecting, using, and sharing children’s personal information for advertising purposes. But here's where it gets controversial: while Pixalate's findings are concerning, the report itself acknowledges that the mere appearance of an app being child-directed doesn't automatically mean it's breaking the law. This nuance is crucial, as it highlights the complexity of enforcing privacy regulations in the ever-evolving digital world.
Pixalate’s investigation analyzed a massive 23,097 mobile apps classified as potentially targeting children. Of these, 7,524 were registered in the APAC region. The findings paint a worrying picture of children’s data privacy:
Privacy Policy Failures: A shocking 77% of the potentially violating apps lacked adequate disclosures about how they handle children’s personal information. Even more alarming, 78 apps had no privacy policy at all, with 92% of these transmitting users’ IP addresses for advertising purposes.
Data Sharing Concerns: 96% of the flagged APAC apps shared U.S. users' device IDs in the advertising bid stream, raising serious concerns about data tracking and profiling.
Widespread Reach: These 1,248 apps have amassed a combined user base of over 117 million in the U.S., indicating the vast scale of potential privacy violations.
Advertising Network Involvement: Google Ad Exchange was found in the app-ads.txt files of 45% of the non-compliant apps, highlighting the role of major advertising platforms in this ecosystem.
And this is the part most people miss: COPPA, enacted to protect children under 13, defines personal information broadly, including location, contact details, persistent identifiers like IP addresses, and even photos and videos containing a child’s image or voice. This means that seemingly innocuous apps, like coloring books or driving simulators, could be inadvertently collecting sensitive data without proper safeguards.
The report lists the top 5 likely non-compliant APAC-registered apps on both Google Play and Apple App Store, with popular titles like Brain Out®: Can you pass it? and Coloring Book -Color by Number raising concerns.
Pixalate’s methodology involved analyzing app availability, child-directed classification, advertising integration, and privacy policy analysis. The full report, available for download, provides detailed insights into their findings.
A Call for Action and Debate: Pixalate’s report serves as a stark reminder of the vulnerabilities children face in the digital age. While the findings are concerning, they also spark important discussions. How can we ensure app developers prioritize child privacy? What role should platforms like Google and Apple play in enforcing stricter regulations? And crucially, how can parents and caregivers empower children to navigate the digital world safely? These questions demand urgent attention and collaborative solutions to protect the privacy and well-being of our youngest digital citizens.
