The exponential growth of mobile apps within the Android ecosystem has underscored the critical need for robust user privacy and data protection measures. Central to these concerns are the privacy policies that serve as the primary channel of communication between organizations and users, detailing data collection, utilization, and sharing practices. However, the efficacy of these policies is often undermined by their inaccessibility and the legalese that obfuscates their intent, presenting a barrier to informed user consent. This study addresses these challenges by harnessing the capabilities of Generative AI (GenAI) to perform a detailed analysis of data practices in Android apps. Our methodology extends beyond the traditional scope of AI-assisted analysis by not only identifying third-party entities but also by elucidating their data handling purposes. We introduce a classification system that distinguishes between ‘Regular’ and ‘Irregular’ app behaviors, offering a benchmark for app evaluation and compliance assessment. Our comparative analysis across various apps reveals patterns and anomalies in data management, providing actionable insights for developers, regulators, and users.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Dissecting Data Practices in Android Apps: A Comparative Study of Data Collection and Sharing Behaviors

  • Triet M. Nguyen,
  • Nghiem T. Pham,
  • Hieu M. Doan,
  • Khoa D. Tran,
  • Bao Q. Tran,
  • Khiem G. Huynh,
  • Nam B. Tran,
  • Khanh H. Vo

摘要

The exponential growth of mobile apps within the Android ecosystem has underscored the critical need for robust user privacy and data protection measures. Central to these concerns are the privacy policies that serve as the primary channel of communication between organizations and users, detailing data collection, utilization, and sharing practices. However, the efficacy of these policies is often undermined by their inaccessibility and the legalese that obfuscates their intent, presenting a barrier to informed user consent. This study addresses these challenges by harnessing the capabilities of Generative AI (GenAI) to perform a detailed analysis of data practices in Android apps. Our methodology extends beyond the traditional scope of AI-assisted analysis by not only identifying third-party entities but also by elucidating their data handling purposes. We introduce a classification system that distinguishes between ‘Regular’ and ‘Irregular’ app behaviors, offering a benchmark for app evaluation and compliance assessment. Our comparative analysis across various apps reveals patterns and anomalies in data management, providing actionable insights for developers, regulators, and users.