“A lot of education sites have glaring security problems,” said Mr. Porterfield, the principal engineer at a software start-up in Los Altos, Calif. “A big part of the problem is that there’s not even any consensus of what ‘good security’ means for an educational website or app.”
Contacted last week by a reporter, John Campbell, the chief executive of the Cambium Learning Group, the company behind Raz-Kids.com, said that his company took privacy very seriously and that the site did not store sensitive personal details like student addresses or phone numbers.
“We are confident that we have taken the necessary steps to protect all student and teacher data at all times and comply with all federal and state laws,” Mr. Campbell wrote in an emailed statement.
Many schools use Google’s cloud products. Google’s business model mines data to sell ads…