← Parental Control
F

Google Family Link

Fail
Google · 🇺🇸 United States
PolicyApp PermissionsNetwork TrafficFirmwareRegulatory
Technical details
App: com.google.android.apps.kids.familylink
Manufacturer: Google LLC (Alphabet Inc.)

⚠️ The bottom line

Google Family Link protects your child. It also creates your child's Google account. That account collects your child's search history, location, YouTube viewing, app usage, and browsing data. Google paid $170 million to settle allegations it illegally collected children's data and used it for targeted advertising on YouTube -- the largest COPPA fine in history. Family Link is the tool Google built after getting caught. It gives parents control over screen time. It gives Google a data pipeline that starts at age 5 and runs for life. By the time your child turns 18, Google has 13 years of their search history, their location history, their YouTube viewing habits, and every app they've ever used. Family Link protects your child from the internet. Nobody protects your child from Family Link. Google doesn't show personalised ads to children. Google waits. Every search your 8-year-old makes, every YouTube video they watch, every place they go with location tracking enabled -- collected and stored. When they turn 13, the account transitions from "supervised" to standard. The ad-free promise expires. The data doesn't. Years of childhood search history, viewing habits, and location data become the foundation of an advertising profile Google has been building since before your child could read. Google's promise is precise: no personalised ads for supervised accounts. The promise says nothing about what happens to a decade of childhood data when the supervision ends.

Legal jurisdiction
🇺🇸 United States (headquarters)
CLOUD Act read more →
US govt can demand your data from this company even if stored overseas
FISA §702 / PRISM read more →
NSA collects stored emails, photos, messages without individual warrants
Geofence warrants read more →
Police can demand location data for everyone near a crime scene
Spying
2/4 MODERATE
Is someone spying on me?
Kids at risk
Data Sharing
3/4 HIGH
Who gets my data?
Kids at risk
Security
0/4 N/A
Is it actually secure?
Honesty
2/4 MODERATE
Can I trust what they say?
Kids at risk
CONFIGURE High-risk areas that can be partially mitigated with settings changes.
3Contradictions
1Critical
2High
0Medium
2Sources
Findings by concern
Spying 2/4 MODERATE 1 finding
⚡ highmarketing claims vs app permissions
Family Link isn't an app you install. It's Android itself. You can't uninstall it. You can't bypass it. Google is simultaneously the phone's operating system, the data collector, the parental control tool, and the advertising company. There is no independent party anywhere in this system. A 16-year-old who wants to delete embarrassing searches from when they were 10 can't -- not without their parent's permission. The child has no independent data rights within Google's system. No privacy from their parents. No privacy from Google. And when they turn 18, the data Google collected since childhood is already in the system. Google didn't just build a parental control tool. Google built the surveillance into the operating system and called it a feature.

What they claim: Family Link gives parents the ability to manage their child's digital life, including approving app downloads, setting screen time limits, and tracking location.

What we found: Family Link is built into Android -- it cannot be fully uninstalled or bypassed on Android devices. For families using Android (87% of global smartphone market), Google's parental control is the default and often only option. Children cannot delete their Google account or associated data without parental approval. The child has no independent data rights. A teenager who wants to delete embarrassing search history from age 10 cannot do so without their parent's permission. Family Link tracks the child's real-time location and provides location history to parents. Unlike mSpy or Bark, Family Link is not a third-party surveillance tool -- it is the operating system itself conducting the surveillance. Google is simultaneously the platform, the data collector, the parental control tool, and the advertising company. There is no independent party protecting the child's interests in this arrangement.

Data Sharing 3/4 HIGH 2 findings
⚠️ criticalmarketing claims vs third party research
Google Family Link protects your child. It also creates your child's Google account. That account collects your child's search history, location, YouTube viewing, app usage, and browsing data. Google paid $170 million to settle allegations it illegally collected children's data and used it for targeted advertising on YouTube -- the largest COPPA fine in history. Family Link is the tool Google built after getting caught. It gives parents control over screen time. It gives Google a data pipeline that starts at age 5 and runs for life. By the time your child turns 18, Google has 13 years of their search history, their location history, their YouTube viewing habits, and every app they've ever used. Family Link protects your child from the internet. Nobody protects your child from Family Link.

What they claim: Google Family Link markets itself as helping parents "set digital ground rules" and "keep your family safe online," positioning Google as a trusted partner in child safety.

What we found: Google Family Link requires creating a Google account for children -- feeding data into Google's ecosystem from childhood. The child's search history, location data, YouTube watch history, app usage patterns, and Chrome browsing activity are all collected by Google. In 2019, Google and YouTube paid $170 million to settle FTC and New York AG allegations that YouTube illegally collected children's personal information and used it to target ads to children, violating COPPA. The settlement was the largest ever in a COPPA case. Google's parental control tool creates the Google account that Google then uses to collect data from children. The tool that claims to protect children is also the onboarding mechanism for Google's data collection infrastructure. A child who grows up with Family Link has a Google account with 13+ years of search history, location data, and viewing habits by the time they reach adulthood.

⚡ highpolicy claims vs app permissions
Google doesn't show personalised ads to children. Google waits. Every search your 8-year-old makes, every YouTube video they watch, every place they go with location tracking enabled -- collected and stored. When they turn 13, the account transitions from "supervised" to standard. The ad-free promise expires. The data doesn't. Years of childhood search history, viewing habits, and location data become the foundation of an advertising profile Google has been building since before your child could read. Google's promise is precise: no personalised ads for supervised accounts. The promise says nothing about what happens to a decade of childhood data when the supervision ends.

What they claim: Google states that for supervised child accounts, it "won't serve personalized ads" and "won't use data from supervised accounts for ad personalization."

What we found: While Google states it doesn't serve personalised ads to supervised child accounts, the data collected during childhood doesn't disappear when the child turns 13 and the account transitions to a standard Google account. Years of search history, location data, YouTube viewing habits, and app usage patterns become available for Google's advertising infrastructure once the account is no longer supervised. Google's promise applies to the child. It does not apply to the adult that child becomes. The data collected from ages 5-12 -- what they searched for, where they went, what they watched -- becomes training data for the ad profile Google builds when they turn 13. Google doesn't serve ads to children. Google builds the advertising profile during childhood and monetises it during adolescence.

What happened to real people
Documented incidents involving Google products and user data.
Jorge Molina jailed 6 days for murder via geofence warrant based on Google Sensorvault location data. Lost job, car, reputation. Charges never filed. [source]
PRISM participant since 2009. NSA collects stored communications. FBI conducts warrantless 'backdoor searches' of American data using names and email addresses. [source]
Google received 180 geofence warrants per week by 2019. Each warrant searches tens of millions of accounts. Supreme Court hearing constitutionality (Chatrie v. United States). [source]
What your data is worth to governments
Google complied with 235,000 government data requests in H1 2024. That's +530% over 10 years. Google has been a confirmed PRISM participant since 2009. Under this programme, the NSA collects stored communications. The company is legally prohibited from telling you. Jurisdiction: US (CLOUD Act, FISA Section 702, Patriot Act).
Documented: Jorge Molina jailed 6 days for murder via geofence warrant based on Google Sensorvault location data. Lost job, car, reputation. Charges never filed.
Documented: PRISM participant since 2009. NSA collects stored communications. FBI conducts warrantless 'backdoor searches' of American data using names and email addresses.
What is PRISM? · What is the CLOUD Act? · Transparency report
Sources