Better the Devil You Know: Exposing the Data Sharing Practices of Smartphone Apps
summary
A prototype called Data Controller Indicators and a personalized DCIs variant exposes which third parties receive app data by replaying app traffic through a transparent man-in-the-middle proxy and mapping flows from 50 popular apps; a lab study with 30 participants compares permissions, purpose text, Privacy Leaks, DCI and PDCI interfaces. Participants take longer but choose apps with fewer third parties, report higher confidence, consider more factors, and about half prefer personalized views while others find them overwhelming or hard to interpret.
AI-written summary · about
chapters (6)
- 0:00Introduction to data sharing
- 5:26Current privacy control limitations
- 7:12Designing the Data Controller Indicator
- 9:59Evaluating privacy interfaces
- 16:44Study findings and conclusions
- 17:25Q&A on methodology and impact
related talks
37mHey, You, Get off My Private Data: Do Apps Respect Your Privacy as They Claim?
28mEmbracing innovation by building privacy friendly apps
25mThe State of Mobile App Privacy: Compliance Trends & Takeaways
17mPrivacy Design Flaws
17mMeasuring Privacy Risks in Mobile Apps at Scale
53mExplain, please. Help your users trust you
31mPanel on Privacy
38mDeveloping Mobile Apps with Privacy as a Baseline Need