App Store Age Verification: 3 Questions on Data Storage Duration

Picture this. It's 11pm, you want a simple weather app, and your phone asks you to prove you're an adult. Not a checkbox. Proof. That is the everyday version of app store age verification, and it raises a question almost nobody is answering out loud: where does that proof go?

App store age verification is meant to keep kids safe, but because it has to check every user, adults may end up handing over more personal information than they expect, so ask what is requested, who receives it, and how long it is kept.

App store age verification: a review of the trade nobody asked you to make

An opinion piece in the Arizona Daily Star argues that checking ages at the app store could put everyone's privacy at risk. I couldn't pull up that exact column, but the Arizona Daily Star's related coverage lays out the same worry: age checks aimed at kids touch every internet user. I think the worry is fair. Here's why.

To catch the few kids who shouldn't be somewhere, a system has to look at everybody. Every adult has to verify their age too. That's the trap built into the design. A child-safety tool quietly becomes a way of collecting information from the whole population.

How app stores will handle age verification

The idea is simple on paper. Instead of every app checking ages on its own, the two big app stores (Apple's and Google's) do it once. Supporters say that is tidier than dozens of separate checks. Meta and other big platforms have pushed for exactly that, putting the job on Apple and Google. Utah was the first state to pass an app-level rule, in 2025, and about 25 US states now have some form of online age check law.

Stores already show an age rating for apps, and these rules would sit on top of that rating. Many proposals also tie a minor's downloads to parental consent, with a parental approval step inside the store.

The catch is what happens next. Some proposals would have the app store pass age information along to every app developer, even when the app has no need for it. A weather app doesn't need to know you're 41. Under that setup, it could find out anyway.

That number matters. Per the Computer & Communications Industry Association, up to 11% of adults can't show that kind of ID. So the system doesn't only collect data. It can also lock out grown adults who have done nothing wrong.

---

Why app store age verification is really a storage question

Most of us hear "age check" and picture a quick yes or no. The reality can be messier. Age checks often rely on a government ID, a face scan, or other biometric data (your face, voice, or fingerprints, the body stuff that's uniquely you). Whatever is collected has to sit somewhere. That is where storage comes in.

What type of information gets requested

Not every check is alike. The type of proof matters more than the fact that a check happens. A check that confirms "over 18" and forgets you is one thing. A check that keeps a copy of your driver's license, or a scan of your face, is another thing entirely. A breach of the second kind is far worse, because you can't change your face the way you change a password.

What to look for	A narrow check	A broad check
Type of proof	A simple yes or no on being an adult	A government ID or a face scan
Who receives it	Only the app store	Every app developer you download from
Storage	Nothing kept after the check	Records kept in a central database
Accountability	A named company you can contact	Unclear who answers when something leaks

I built that table as a checklist, not a report card on any one company. The sources I reviewed describe the broad side as a real risk in current proposals. They don't say every app store works that way.

Where Google fits in

When people say "the app store," they mostly mean two companies: Apple and Google. That concentration is why this debate feels so big. Whatever those two decide to ask for becomes the default for nearly everyone with a phone. Apple users on iOS and Android owners alike would live with the result.

Apple users and the hidden handoff

Here's the part that gets lost. Even if the store itself behaves well, the handoff to apps is the soft spot. The New America think tank has a deep-dive on the App Store Accountability Act that points to privacy weak spots in how age data gets shared. More hands holding your information means more places it can leak. On an iPhone, an iOS update can change prompts and settings, so recheck what the store asks for after each update.

---

How long can app store age verification data be kept? Asking about maximum storage duration

Short answer: it depends on the company and the law, and the sources I found don't give one universal number. That is exactly why you should ask. You want to know the maximum amount of time your age information can sit on someone's servers before it must be deleted.

Maximum storage: the question to ask first

Ask for the maximum storage in plain terms. "Do you keep my ID or face scan after the check, yes or no?" If the answer is vague, treat that as an answer. Previously in this series: Facial Recognition Home Office Admits Risk Of Wrong Matches.

Storage duration: how long is too long

The storage duration is separate from the maximum. A company might say it keeps data "as needed." That isn't a number. A real policy names a number of days or says "deleted right away."

Duration of the check versus duration of the record

The check takes seconds. The record can last years. Don't confuse the two. The duration of the record is what you are really agreeing to.

The maximum a store should ever ask for

Here's my own opinion. The maximum anyone should ask for is the least amount that answers the question. If the question is "are you an adult," the answer is yes or no. It is not a scan of your passport.

Protecting children online may require companies to collect more personal data than they otherwise would, subject themselves to additional privacy requirements, and invite consumer concerns.

Framing of the age verification paradox, Legal 500

That's the paradox in one sentence. Protecting kids pulls in more data, and more data means more risk for everybody.

---

What do courts and critics say about app store age verification?

Courts and privacy groups have pushed back. A federal judge blocked Texas's age verification law over First Amendment concerns, as the Information Technology and Innovation Foundation notes. Whether Texas will be required to enforce its law is not settled. Meanwhile, the Arizona Daily Star reported that the EFF and the Center for Democracy and Technology raised privacy and free speech worries about YouTube's age verification test.

Look, nobody is saying protecting kids is a bad goal. It isn't. The argument is about the method, and about whether grown adults should have to pay for it with their documents.

Now, a gentle word from where we sit. If you've ever wondered whether a face or a profile is really who it claims to be, that is the exact question identity technology exists to answer. The same tool can protect you or expose you, depending on the rules around it. So here is one thing to do. Before you hand over anything, ask three questions: what is requested, who receives it, and how long it is kept. If you can't get a straight answer to all three, don't tap agree. Up next: App Store Age Verification 3 Questions On Storage Duration.

So here's what I keep circling back to. If a store needs your ID to prove you're an adult, and the app you wanted was only going to tell you if it's raining, who exactly did that check protect?

app store age verification: Frequently Asked Questions