Suppliers of mobile applications should conduct authentication on users’ identity “based on registered users’ cell phone numbers” and establish mechanism to protect users’ information security including users’ locations, according to an administrative regulation unveiled by Cyberspace Administration of China on Tuesday.

The regulation said suppliers of mobile applications should also “keep user activity logs on record for 60 days before deleting them”. Collecting user’s location data, accessing users’ contacts’ information, using cameras or recording functions and other irrelevant bundled features are banned unless users are notified and their consents are granted, according to the regulation.

The regulation has also urged suppliers and app stores not to engage in illegal activities that endanger national security, disturb the social order or infringe others’ legal rights. Government agencies and public institutions are also called to actively create apps that provide a public service and further boost economic development.