COPPA - Children's Online Privacy Protection Act Issues

We develop apps for kids and until now we were completely unaware that Corona enabled the collection of a persistent identifier such as the UDID. We just received a letter via Federal Express from the Federal Trade Commission notifying us that one or more of our apps may have violated this privacy policy by collecting the UDID. I find this appalling that we did not have knowledge that our “Corona Built” apps were collecting this information without our permission! We now have to update all our apps to remove this. Is this practice still taking place???