数字原住民对位置数据隐私风险认知不足,多数人低估应用权限数量且不愿及时撤回。
"I'm not for sale" -- Perceptions and limited awareness of privacy risks by digital natives about location data
- 通过问卷调查99名年轻人,分析其位置数据共享行为与风险感知差异。
- 54%用户低估已授权的应用数量,33%忘记或不主动撤销权限。
- 超半数用户使用演示工具后惊讶于信息推断程度,愿改进隐私设置。
尽管移动设备在日常生活中带来诸多便利,但也引发隐私担忧,例如位置数据可推断敏感信息。这些数据通过服务提供商和移动应用被共享。理解用户如何以及与谁共享位置数据、及其对隐私风险的感知,对设计可用的隐私保护技术至关重要。本研究通过对n=99名年轻成人(即数字原住民)进行定量与定性分析,考察其对位置数据共享的认知、态度及自述行为,并比较其声称做法与实际行为以揭示其心理模型。在查看位置轨迹及其推断信息前后,调查参与者对隐私风险的理解变化。结果显示,参与者存在高风险隐私行为:约54%低估已授权应用数量,33%忘记或未考虑撤销权限。通过演示工具进行位置数据推断后,略超半数(57%)用户对可推断信息的程度感到意外,47%表示将减少数据访问权限。此外,多数用户对自我保护工具知之甚少,但51%仍愿意采纳建议来改善隐私。通过透明工具教育用户,包括数字原住民,是提升隐私意识的可行路径。
原文摘要 · Abstract (English)
Although mobile devices benefit users in their daily lives in numerous ways, they also raise several privacy concerns. For instance, they can reveal sensitive information that can be inferred from location data. This location data is shared through service providers as well as mobile applications. Understanding how and with whom users share their location data -- as well as users' perception of the underlying privacy risks --, are important notions to grasp in order to design usable privacy-enhancing technologies. In this work, we perform a quantitative and qualitative analysis of smartphone users' awareness, perception and self-reported behavior towards location data-sharing through a survey of n=99 young adult participants (i.e., digital natives). We compare stated practices with actual behaviors to better understand their mental models, and survey participants' understanding of privacy risks before and after the inspection of location traces and the information that can be inferred therefrom. Our empirical results show that participants have risky privacy practices: about 54% of participants underestimate the number of mobile applications to which they have granted access to their data, and 33% forget or do not think of revoking access to their data. Also, by using a demonstrator to perform inferences from location data, we observe that slightly more than half of participants (57%) are surprised by the extent of potentially inferred information, and that 47% intend to reduce access to their data via permissions as a result of using the demonstrator. Last, a majority of participants have little knowledge of the tools to better protect themselves, but are nonetheless willing to follow suggestions to improve privacy (51%). Educating people, including digital natives, about privacy risks through transparency tools seems a promising approach.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。