Table 4.

Items present in the assessment of criteria for each article.

Item	Reference
	[6]	[14]	[15]	[19]	[20]	[21]	[22]	[23]	[24]	[25]	[26]	[27]	[28]	[29]	[30]	[31]	[32]	[33]	[34]	[35]	[36]	[37]	[38]	[39]
Existence of a data controller	X		X				X																X
DPOa details are given	X
Purposes of the processing are stated		X	X				X			X	X		X	X	X		X	X			X		X	X
Legal basis exists	X		X				X	X		X		X		X		X							X	X
Recipients of personal data are identified		X	X	X		X	X		X	X			X	X	X		X	X	X		X		X	X
International data transfers are disclosed	X					X
Data storage period is stated			X																				X
Existence of users’ data rights		X	X	X			X	X	X			X	X	X		X		X	X					X
Existence of the right to withdraw consent	X		X				X																	X
Existence of the right to complain to a supervisory authority			X																				X
Obligation to provide data			X																				X
Existence of data processing and profiling														X
Nature of the collected information is disclosed		X			X	X	X				X		X	X										X
Risks of data collection and management of confidentiality breaches are stated										X	X
Location of the collected information is disclosed		X		X	X		X												X
User registration is required				X	X								X					X	X
Existence of a privacy policy	X	X	X	X					X	X	X	X			X		X	X	X				X
Privacy policy good practices	X		X					X	X			X			X	X	X					X	X
Minimum data needed for app functioning are collected										X
Protection of minors and age of verification exists		X	X								X		X	X
Anonymization takes place		X	X								X	X					X							X

^aDPO: data protection officer.