TORONTO — As Ontario students head back to school, many parents are giving their children smartphones so they can stay connected with family. But cybersecurity and child-safety experts are warning that handing over a new phone without first checking its security, privacy settings and apps could expose children to risks ranging from online scams and data collection to bullying and contact with strangers.
Canadian cybersecurity expert Dave Nelson says parents should think of a child’s first smartphone as much more than simply a device. It effectively gives the child a new digital identity and access to an online world that requires proper safeguards from the beginning.
One of the first things parents should check is whether the phone is still supported by its manufacturer.
Smartphones have a limited security lifespan. Eventually, manufacturers such as Apple and Google stop providing operating-system and security updates for older models. Once that happens, newly discovered security vulnerabilities may remain unpatched, making the device increasingly vulnerable to hackers, scammers and malicious software.
The issue is particularly important when buying a used or refurbished phone as a less expensive option for a child.
Experts recommend purchasing refurbished devices from reputable sellers that provide clear information about the phone’s condition and offer a return policy. Parents should also make sure the model is not so old that it can no longer run currently supported software.
When purchasing a used device in Canada, parents should also verify its IMEI number through Device Check Canada before paying for or activating it. The service allows consumers to determine whether a phone has been reported lost or stolen. Devices reported stolen can be blocked from operating on participating Canadian wireless networks.
Even a brand-new phone should not necessarily be handed to a child straight out of the box.
Parents should first install all available operating-system and security updates and enable automatic updates for the phone, internet browser and installed applications. Keeping software current helps close security vulnerabilities that criminals could otherwise exploit.
Another important precaution is creating a separate child account rather than allowing the youngster to use a parent’s personal Apple or Google account.
A parent’s account can contain access to credit cards, banking applications, work email, photographs, documents and other sensitive information. Giving a child access to the same account can lead to accidental purchases, unwanted access to private information or unintended changes to important settings.
A dedicated child account also provides parents with tools designed specifically for families.
On Apple devices, parents can use Family Sharing and Screen Time, while Android phones can be managed through a supervised Google account and Family Link. These services can help parents establish screen-time limits, approve app downloads and manage other privacy and safety settings.
Parental controls can also restrict inappropriate content, prevent in-app purchases and limit access to certain phone features. Safe-search functions can reduce exposure to explicit websites, images and videos, while services such as YouTube offer restricted settings intended to filter some mature content.
Experts caution, however, that parental controls should not become secret surveillance.
Kara Brisson-Boivin of Canadian digital-media literacy organization MediaSmarts recommends that parents review privacy and safety settings together with their children.
Doing so can turn the process into a lesson about why privacy matters and help children understand the reasoning behind family rules.
Experts say openly discussing monitoring is generally preferable to secretly tracking everything a child does. Parents who want their children to respect privacy should also demonstrate that principle themselves.
Another major concern is the applications installed on the phone.
Parents are advised to examine every app rather than assuming that an innocent-looking game or utility is harmless.
Games, avatar creators, quizzes, wallpapers, keyboards, photo editors, QR scanners, phone-cleaning programs and even flashlight applications can sometimes request access to far more personal information than they genuinely need.
A simple flashlight application, for example, should raise questions if it asks for permission to access contacts, precise location information or the microphone.
Parents should therefore examine app permissions carefully and consider whether the requested access makes sense for what the application actually does.
Location sharing should generally remain turned off unless there is a clear reason to enable it, such as a family location service that both parent and child understand and have agreed to use.
Particular attention should also be given to multiplayer games, anonymous-chat services, livestreaming platforms, social-media applications and private photo-storage apps.
Cybersecurity experts warn that these services can potentially expose children to strangers and create opportunities for cyberbullying, grooming, sexual extortion and other forms of exploitation.
Technology alone, however, cannot provide complete protection.
Experts say one of the strongest safeguards is a relationship in which children know they can tell their parents when something uncomfortable or frightening happens online without immediately fearing punishment or losing their phone.
Before giving a child their first smartphone, families are encouraged to discuss clear rules covering which apps can be downloaded, who the child can communicate with, when location information can be shared and what the child should do if a stranger contacts them or something online feels wrong.
MediaSmarts research suggests that young people themselves want guidance rather than simply being handed a smartphone without rules or preparation.
Families that establish internet and phone rules together and maintain open communication can help children develop safer online habits, including being more careful about sharing personal information and interacting with strangers.
For parents, the message from experts is straightforward: buying the phone is only the beginning.
Before a child carries it to school, parents should make sure the device is secure, updated and appropriately configured, examine what information its apps can access and, most importantly, make sure their child understands how to seek help when something goes wrong online.
A smartphone can provide children with independence and an important connection to their families, but experts say that independence should begin with security, sensible boundaries and an open conversation between parents and children.