The iOS privacy 'nutrition label': how much the Dropbox app says it collects
2020 (introduced); ongoing
Apple's App Store privacy 'nutrition labels,' introduced in December 2020, require apps to disclose their data collection — and the Dropbox app's label lists a broad range of data linked to the user's identity, from contact info and identifiers to usage data and diagnostics.
What happened
In December 2020 Apple began requiring every App Store app to publish a privacy 'nutrition label' summarizing the categories of data it collects and whether that data is linked to the user or used to track them across other apps and websites. The labels surfaced, in one place, how much information cloud apps gather beyond the files users knowingly upload.
Dropbox's iOS app label discloses collection across multiple categories of 'data linked to you' — including user content, contact information, identifiers, usage data, and diagnostics — reflecting the metadata, device, and behavioral signals the app gathers in addition to file contents. Dropbox developers themselves sought guidance from Dropbox on how to fill out Apple's data-collection and tracking questions when their own apps merely use the Dropbox SDK, underscoring how much data flows through the integration. The disclosures are self-reported by the developer and describe categories rather than exact fields, so they understate granularity.
Impact
The nutrition label gave ordinary users a rare, standardized view of the breadth of Dropbox's mobile data collection, reframing Dropbox not merely as a place to keep files but as an app that — like most — also harvests identifiers, usage, and diagnostics tied to the account. It fed broader scrutiny of how 'storage' apps quietly accumulate behavioral and device data.