Skip to main content
Top

2024 | OriginalPaper | Chapter

User Interaction Data in Apps: Comparing Policy Claims to Implementations

Authors : Feiyang Tang, Bjarte M. Østvold

Published in: Privacy and Identity Management. Sharing in a Digital World

Publisher: Springer Nature Switzerland

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

The chapter delves into the privacy implications of user interaction data collection in mobile apps, challenging the effectiveness of anonymization techniques. It introduces an automated method to compare privacy policy claims with actual data collection practices in app code, aiming to enhance transparency and rebuild user trust. The study analyzes 100 popular apps, revealing significant gaps in transparency and detailing the extent of user interaction data collection. The chapter also presents a case study of four popular apps, highlighting the need for clearer and more detailed privacy policies. By addressing these issues, the research contributes to fostering a culture of transparency and accountability in the mobile app ecosystem.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Business + Economics & Engineering + Technology"

Online-Abonnement

Springer Professional "Business + Economics & Engineering + Technology" gives you access to:

  • more than 102.000 books
  • more than 537 journals

from the following subject areas:

  • Automotive
  • Construction + Real Estate
  • Business IT + Informatics
  • Electrical Engineering + Electronics
  • Energy + Sustainability
  • Finance + Banking
  • Management + Leadership
  • Marketing + Sales
  • Mechanical Engineering + Materials
  • Insurance + Risk


Secure your knowledge advantage now!

Springer Professional "Engineering + Technology"

Online-Abonnement

Springer Professional "Engineering + Technology" gives you access to:

  • more than 67.000 books
  • more than 390 journals

from the following specialised fileds:

  • Automotive
  • Business IT + Informatics
  • Construction + Real Estate
  • Electrical Engineering + Electronics
  • Energy + Sustainability
  • Mechanical Engineering + Materials





 

Secure your knowledge advantage now!

Springer Professional "Business + Economics"

Online-Abonnement

Springer Professional "Business + Economics" gives you access to:

  • more than 67.000 books
  • more than 340 journals

from the following specialised fileds:

  • Construction + Real Estate
  • Business IT + Informatics
  • Finance + Banking
  • Management + Leadership
  • Marketing + Sales
  • Insurance + Risk



Secure your knowledge advantage now!

Appendix
Available only for authorised users
Footnotes
2
The German Google Play Store was selected for its adherence to the GDPR, ensuring that the apps included in the study would have well-constructed privacy policies. https://​play.​google.​com/​store/​apps?​hl=​en_​US &​gl=​DE.
 
Literature
1.
go back to reference Avdiienko, V., et al.: Mining apps for abnormal usage of sensitive data. In: The 37th IEEE International Conference on Software Engineering, vol. 1, pp. 426–436. IEEE (2015) Avdiienko, V., et al.: Mining apps for abnormal usage of sensitive data. In: The 37th IEEE International Conference on Software Engineering, vol. 1, pp. 426–436. IEEE (2015)
2.
go back to reference Creţu, A.M., Monti, F., Marrone, S., Dong, X., Bronstein, M., de Montjoye, Y.A.: Interaction data are identifiable even across long periods of time. Nat. Commun. 13(1), 313 (2022)CrossRef Creţu, A.M., Monti, F., Marrone, S., Dong, X., Bronstein, M., de Montjoye, Y.A.: Interaction data are identifiable even across long periods of time. Nat. Commun. 13(1), 313 (2022)CrossRef
3.
go back to reference Devlin, J., Chang, M.W., Lee, K., Toutanova, K.: Bert: pre-training of deep bidirectional transformers for language understanding (2019) Devlin, J., Chang, M.W., Lee, K., Toutanova, K.: Bert: pre-training of deep bidirectional transformers for language understanding (2019)
4.
go back to reference Enck, W., et al.: TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones. ACM Trans. Comput. Syst. (TOCS) 32(2), 1–29 (2014)CrossRef Enck, W., et al.: TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones. ACM Trans. Comput. Syst. (TOCS) 32(2), 1–29 (2014)CrossRef
5.
go back to reference Grünewald, E., Pallas, F.: TILT: a GDPR-aligned transparency information language and toolkit for practical privacy engineering. In: Proceedings of the 2021 ACM Conference on Fairness, Accountability, and Transparency, pp. 636–646 (2021) Grünewald, E., Pallas, F.: TILT: a GDPR-aligned transparency information language and toolkit for practical privacy engineering. In: Proceedings of the 2021 ACM Conference on Fairness, Accountability, and Transparency, pp. 636–646 (2021)
6.
go back to reference Leiva, L.A., Arapakis, I., Iordanou, C.: My mouse, my rules: privacy issues of behavioral user profiling via mouse tracking. In: Proceedings of the 2021 Conference on Human Information Interaction and Retrieval, pp. 51–61 (2021) Leiva, L.A., Arapakis, I., Iordanou, C.: My mouse, my rules: privacy issues of behavioral user profiling via mouse tracking. In: Proceedings of the 2021 Conference on Human Information Interaction and Retrieval, pp. 51–61 (2021)
8.
go back to reference Qu, Z., Rastogi, V., Zhang, X., Chen, Y., Zhu, T., Chen, Z.: AutoCog: measuring the description-to-permission fidelity in android applications. In: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, pp. 1354–1365 (2014) Qu, Z., Rastogi, V., Zhang, X., Chen, Y., Zhu, T., Chen, Z.: AutoCog: measuring the description-to-permission fidelity in android applications. In: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, pp. 1354–1365 (2014)
9.
go back to reference Ravichander, A., Black, A.W., Norton, T., Wilson, S., Sadeh, N.: Breaking down walls of text: how can NLP benefit consumer privacy? In: Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing, vol. 1 (2021) Ravichander, A., Black, A.W., Norton, T., Wilson, S., Sadeh, N.: Breaking down walls of text: how can NLP benefit consumer privacy? In: Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing, vol. 1 (2021)
13.
go back to reference Tesfay, W.B., Hofmann, P., Nakamura, T., Kiyomoto, S., Serna, J.: PrivacyGuide: towards an implementation of the EU GDPR on internet privacy policy evaluation. In: Proceedings of the Fourth ACM International Workshop on Security and Privacy Analytics, IWSPA 2018, pp. 15–21 (2018) Tesfay, W.B., Hofmann, P., Nakamura, T., Kiyomoto, S., Serna, J.: PrivacyGuide: towards an implementation of the EU GDPR on internet privacy policy evaluation. In: Proceedings of the Fourth ACM International Workshop on Security and Privacy Analytics, IWSPA 2018, pp. 15–21 (2018)
14.
go back to reference Zhang, X., Wang, X., Slavin, R., Breaux, T., Niu, J.: How does misconfiguration of analytic services compromise mobile privacy? In: Proceedings of the ACM/IEEE 42nd International Conference on Software Engineering, pp. 1572–1583 (2020) Zhang, X., Wang, X., Slavin, R., Breaux, T., Niu, J.: How does misconfiguration of analytic services compromise mobile privacy? In: Proceedings of the ACM/IEEE 42nd International Conference on Software Engineering, pp. 1572–1583 (2020)
15.
go back to reference Zimmeck, S., Goldstein, R., Baraka, D.: PrivacyFlash pro: automating privacy policy generation for mobile apps. In: NDSS (2021) Zimmeck, S., Goldstein, R., Baraka, D.: PrivacyFlash pro: automating privacy policy generation for mobile apps. In: NDSS (2021)
16.
go back to reference Zimmeck, S., et al.: MAPS: scaling privacy compliance analysis to a million apps. Proc. Priv. Enhanc. Tech. 2019, 66 (2019) Zimmeck, S., et al.: MAPS: scaling privacy compliance analysis to a million apps. Proc. Priv. Enhanc. Tech. 2019, 66 (2019)
Metadata
Title
User Interaction Data in Apps: Comparing Policy Claims to Implementations
Authors
Feiyang Tang
Bjarte M. Østvold
Copyright Year
2024
DOI
https://doi.org/10.1007/978-3-031-57978-3_5

Premium Partner