Demystifying Hidden Privacy Settings in Mobile Apps

Abstract

Mobile apps include privacy settings that allow their users to configure how their data should be shared. These settings, however, are often hard to locate and hard to understand by the users, even in popular apps, such as Facebook. More seriously, they are often set to share user data by default, exposing her privacy without proper consent. In this paper, we report the first systematic study on the problem, which is made possible through an in-depth analysis of user perception of the privacy settings. More specifically, we first conduct two user studies (involving nearly one thousand users) to understand privacy settings from the user's perspective, and identify these hard-to-find settings. Then we select 14 features that uniquely characterize such hidden privacy settings and utilize a novel technique called semanticsbased UI tracing to extract them from a given app. On top of these features, a classifier is trained to automatically discover the hidden privacy settings, which together with other innovations, has been implemented into a tool called Hound. Over our labeled data set, the tool achieves an accuracy of 93.54%. Further running it on 100,000 latest apps from both Google Play and third-party markets, we find that over a third (36.29%) of the privacy settings identified from these apps are "hidden". Looking into these settings, we observe that they become hard to discover and hard to understand primarily due to the problematic categorization on the apps' user interfaces and/or confusing descriptions. Further importantly, though more privacy options have been offered to the user over time, also discovered is the persistence of their usability issue, which becomes even more serious, e.g., originally easy-to-find settings now harder to locate. And among all such hidden privacy settings, 82.16% are set to leak user privacy by default. We provide suggestions for improving the usability of these privacy settings at the end of our study.

Intent-aware Permission Architecture: A Model for Rethinking Informed Consent for Android Apps

“…Dr. Android (Jeon et al, 2012) retrofits apps to allow for the specification of fine-grained variants of Android permissions by accumulating existing permission into a taxonomy, each of which admits some common strategies for deriving subpermissions. In (Do et al, 2014;Chen et al, 2019), the authors introduce a permission removal approach to mitigate privacy leaks in Android. Appguard (Backes et al, 2012;Backes et al, 2013) and RetroSkeleton (Davis and Chen, 2013) are both an app-agnostic flexible and dynamic policy re-writing solutions designed towards enhancing security and privacy in untrusted Android applications.…”

Surfacing Privacy Settings Using Semantic Matching

“…While the existing literature on understanding the landscape of privacy settings is scarce, there has been some work done in the extraction and automation of privacy settings, particularly in mobile apps' context [17,16,15]. Chen et al [3] conducted a large-scale study on the usability of privacy settings for Android applications. Their methodology leverages the semantic relationship between the text descriptions of UI elements and the titles of application views to discover privacy menus hidden in apps.…”

Understanding Online Privacy—A Systematic Review of Privacy Visualizations and Privacy by Design Guidelines

“…But the privacy policies that are meant to address these concerns are often lengthy, legally worded documents written to protect the provider [15,59]. Even the interactive permission system found on modern smartphones fails to provide a sufficient understanding of the privacy risks involved with using an application [24,39,78].…”