Technologies K–10 · Years 7–8
What an app collects: auditing permissions and the digital footprint
Digital and Communication Technologies focus area (NSW Technology 7–8, 2023); Digital Technologies: Processes and production skills, Privacy and security (ACARA v9)
The idea
Every app asks for permissions and declares the data it collects, and comparing each item with what the app needs to work shows which data is essential and which only adds to the user's digital footprint.
What you need
- 1 school-managed tablet with 3 school-approved apps installed (for example the camera, a drawing app and a learning app)
- Access to each app's store listing (the privacy or data safety section) and the eSafety Guide
- Audit table: app, permission or data item, purpose stated, essential to the core function (yes or no), reason
How to do it
- Open the tablet's settings and list every permission each app holds (location, camera, microphone, photos, contacts, notifications).
- Read each app's store listing and eSafety Guide entry and add every data item it says it collects.
- For each item, write the app's core function and decide whether the item is essential to it, with a reason.
- Turn off one permission judged not essential and use the app: record whether the core function still works.
- Turn off one permission judged essential (for example camera access for the camera app) and record what breaks, then restore it.
- Design the data collection for your own class project (the Scratch game or micro:bit logger) so it collects only what it needs, and justify each item.
What you should see
The audit table lists every permission and declared data item for the 3 apps, each marked essential or not with a reason. Turning off a non-essential permission keeps the core function working; turning off an essential one stops it (the camera app cannot take a photo without camera access). The learner's own project design collects only data its purpose needs. The learner knows it worked when every judgement in the table is backed by the on and off test or by the app's stated purpose.
What changes
This activity lists no variables to change, measure and keep the same.
Common misconceptions
Each of these ideas is wrong, and the activity is a chance to test it.
- Apps only collect what you type into them (they can collect location, contacts and usage automatically).
- Turning off a permission always breaks the app (many apps keep working when a non-essential permission is refused).
- Free apps cost nothing (many are paid for with the data they collect).
Safety card
Hazards
- Changing settings on personal devices
- Exposing personal data
Controls
- School-managed tablet only; permissions restored at the end
- No personal accounts are signed in
Note
No chemicals or heat.
Curriculum references
The NSW syllabus outcomes and Australian Curriculum v9 codes this activity supports. They are references, not a verified or complete curriculum alignment.
- Technology 7–8 Syllabus (2023), NESA. Current: taught from 2026. Code read from the outcomes page on 2026-09-22.TE4-DIG-01
- Australian Curriculum v9AC9TDI8P14
Sources
The pages the author read to write this activity.
- curriculum.nsw.edu.au/learning-areas/tas/technology-7-8-2023/outcomes
- www.nsw.gov.au/education-and-training/nesa/curriculum/tas/technology-mandatory-7-8-2017
- www.esafety.gov.au/key-topics/esafety-guide
- www.oaic.gov.au/privacy/your-privacy-rights/social-media-and-online-privacy
- www.digitaltechnologieshub.edu.au/plan-and-prepare/scope-and-sequence-f-10/years-7-8