{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,26]],"date-time":"2026-07-26T06:25:10Z","timestamp":1785047110797,"version":"3.55.0"},"reference-count":54,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2026,1,12]],"date-time":"2026-01-12T00:00:00Z","timestamp":1768176000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2026,1,12]],"date-time":"2026-01-12T00:00:00Z","timestamp":1768176000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100008007","name":"Universit\u00e4t Paderborn","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100008007","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Autom Softw Eng"],"published-print":{"date-parts":[[2026,9]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>\n                    Many Android apps collect data from users, and the European Union\u2019s General Data Protection Regulation (GDPR) mandates clear disclosures of such data collection. However, apps often use third-party code, complicating accurate disclosures. This paper investigates how accurately current Android apps fulfill these requirements. In this work, we present a multi-layered definition of privacy-related data to correctly report data collection in Android apps. We further create a dataset of privacy-sensitive data classes that may be used as input by an Android app. This dataset takes into account data collected both through the user interface and system APIs. Based on this, we implement a semi-automated prototype that detects and labels privacy-related data collected by a given Android app. We manually examine the data safety sections of 70 Android apps to observe how data collection is reported, identifying instances of over- and under-reporting. We compare our prototype\u2019s results with the data safety sections of 20 apps revealing reporting discrepancies. Using the results from two Messaging and Social Media apps (Signal and Instagram), we discuss how app developers under-report and over-report data collection, respectively, and identify inaccurately reported data categories. A broader study of 7,500 Android apps reveals that apps most frequently collect data that can\n                    <jats:italic>partially identify<\/jats:italic>\n                    users. Although system APIs consistently collect large amounts of privacy-related data, user interfaces exhibit some more diverse data collection patterns. A more focused study on various domains of apps reveals that the largest fraction of apps collecting personal data belong to the domain of\n                    <jats:italic>Messaging and Social Media<\/jats:italic>\n                    . Our findings show that location is collected frequently by apps, specially from the\n                    <jats:italic>E-commerce and Shopping<\/jats:italic>\n                    domain. However, it is often under-reported in app data safety sections. Our results highlight the need for greater consistency in privacy-aware app development and reporting practices.\n                  <\/jats:p>","DOI":"10.1007\/s10515-025-00589-3","type":"journal-article","created":{"date-parts":[[2026,1,12]],"date-time":"2026-01-12T12:14:06Z","timestamp":1768220046000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["A study of privacy-related data collected by Android apps"],"prefix":"10.1007","volume":"33","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-0434-381X","authenticated-orcid":false,"given":"Mugdha","family":"Khedkar","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-6566-7280","authenticated-orcid":false,"given":"Ambuj","family":"Kumar Mondal","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3470-3647","authenticated-orcid":false,"given":"Eric","family":"Bodden","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,1,12]]},"reference":[{"key":"589_CR1","unstructured":"Google Play Statistics (2023). https:\/\/www.statista.com\/statistics\/266210\/number-of-available-applications-in-the-google-play-store\/"},{"key":"589_CR2","unstructured":"The European parliament and the council of the European union. General Data Protection Regulation (GDPR) (2018). https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016R0679"},{"key":"589_CR3","unstructured":"Cavoukian, A.: Privacy by design: The 7 foundational principles (2009). https:\/\/privacy.ucsc.edu\/resources\/privacy-by-design---foundational-principles.pdf"},{"key":"589_CR4","doi-asserted-by":"publisher","unstructured":"Horstmann, S.A., Domiks, S., Gutfleisch, M., Tran, M., Acar, Y., Moonsamy, V., Naiakshina, A.: \u201cthose things are written by lawyers, and programmers are reading that.\u201d mapping the communication gap between software developers and privacy experts. Proc. Priv. Enhancing Technol. 2024(1), 151\u2013170 (2024). https:\/\/doi.org\/10.56553\/POPETS-2024-0010","DOI":"10.56553\/POPETS-2024-0010"},{"key":"589_CR5","unstructured":"Moonsamy, V., Batten, L.: Android applications: Data leaks via advertising libraries. In: 2014 International Symposium on Information Theory and Its Applications, pp. 314\u2013317 (2014)"},{"key":"589_CR6","doi-asserted-by":"publisher","unstructured":"Yu, L., Luo, X., Liu, X., Zhang, T.: Can we trust the privacy policies of android apps? In: 2016 46th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN), pp. 538\u2013549 (2016). https:\/\/doi.org\/10.1109\/DSN.2016.55","DOI":"10.1109\/DSN.2016.55"},{"key":"589_CR7","doi-asserted-by":"publisher","unstructured":"Zimmeck, S., Wang, Z., Zou, L., Iyengar, R., Liu, B., Schaub, F., Wilson, S., Sadeh, N., Bellovin, S., Reidenberg, J.: Automated Analysis of Privacy Requirements for Mobile Apps. Proceedings 2017 Network and Distributed System Security Symposium. Korea Society of Internet Information, Korea, Republic of (2017). https:\/\/doi.org\/10.14722\/ndss.2017.23034","DOI":"10.14722\/ndss.2017.23034"},{"key":"589_CR8","doi-asserted-by":"publisher","unstructured":"Wang, X., Qin, X., Hosseini, M.B., Slavin, R., Breaux, T.D., Niu, J.: Guileak: Tracing privacy policy claims on user input data for android applications. In: Proceedings of the 40th International Conference on Software Engineering. ICSE \u201918, pp. 37\u201347. Association for Computing Machinery, New York, NY, USA (2018). https:\/\/doi.org\/10.1145\/3180155.3180196","DOI":"10.1145\/3180155.3180196"},{"key":"589_CR9","doi-asserted-by":"publisher","unstructured":"Tan, Z., Song, W.: Ptpdroid: Detecting violated user privacy disclosures to third-parties of android apps. In: 2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE), pp. 473\u2013485 (2023). https:\/\/doi.org\/10.1109\/ICSE48619.2023.00050","DOI":"10.1109\/ICSE48619.2023.00050"},{"key":"589_CR10","unstructured":"Data Safety Section (2022). https:\/\/blog.google\/products\/google-play\/data-safety\/"},{"key":"589_CR11","unstructured":"See No Evil: Loopholes in Google\u2019s Data Safety Labels Keep Companies in the Clear and Consumers in the Dark (2023). https:\/\/foundation.mozilla.org\/en\/campaigns\/googles-data-safety-labels\/"},{"key":"589_CR12","doi-asserted-by":"publisher","unstructured":"Khedkar, M., Mondal, A.K., Bodden, E.: Do android app developers accurately report collection of privacy-related data? In: Proceedings of the 39th IEEE\/ACM International Conference on Automated Software Engineering Workshops. ASEW \u201924, pp. 176\u2013186. Association for Computing Machinery, New York, NY, USA (2024). https:\/\/doi.org\/10.1145\/3691621.3694949","DOI":"10.1145\/3691621.3694949"},{"key":"589_CR13","unstructured":"GDPR.EU: What is GDPR? (2018). https:\/\/gdpr.eu\/what-is-gdpr\/"},{"key":"589_CR14","unstructured":"Konstantinos Limniotis, Marit Hansen: Recommendations on shaping technology according to gdpr provisions - an overview on data pseudonymisation. Technical report, European Union Agency for Cybersecurity (ENISA) (2019). https:\/\/www.enisa.europa.eu\/publications\/recommendations-on-shaping-technology-according-to-gdpr-provisions"},{"key":"589_CR15","unstructured":"Jensen M, Lauradoux C, Limniotis K.: Pseudonymisation techniques and best practices. Technical report, European Union Agency for Cybersecurity (ENISA) (2019). https:\/\/www.enisa.europa.eu\/publications\/pseudonymisation-techniques-and-best-practices"},{"key":"589_CR16","doi-asserted-by":"publisher","unstructured":"Kelley, P.G., Bresee, J., Cranor, L.F., Reeder, R.W.: A \"nutrition label\" for privacy. In: Proceedings of the 5th Symposium on Usable Privacy and Security. SOUPS \u201909. Association for Computing Machinery, New York, NY, USA (2009). https:\/\/doi.org\/10.1145\/1572532.1572538","DOI":"10.1145\/1572532.1572538"},{"key":"589_CR17","doi-asserted-by":"publisher","unstructured":"Kelley, P.G., Cranor, L.F., Sadeh, N.: Privacy as part of the app decision-making process. In: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems. CHI \u201913, pp. 3393\u20133402. Association for Computing Machinery, New York, NY, USA (2013). https:\/\/doi.org\/10.1145\/2470654.2466466","DOI":"10.1145\/2470654.2466466"},{"issue":"1","key":"589_CR18","doi-asserted-by":"publisher","first-page":"491","DOI":"10.1007\/s11277-018-5456-4","volume":"103","author":"H Han","year":"2018","unstructured":"Han, H., Li, R., Tang, J.: Identify and inspect libraries in android applications. Wirel. Pers. Commun. 103(1), 491\u2013503 (2018)","journal-title":"Wirel. Pers. Commun."},{"key":"589_CR19","doi-asserted-by":"publisher","unstructured":"Gardner, J., Feng, Y., Reiman, K., Lin, Z., Jain, A., Sadeh, N.: Helping mobile application developers create accurate privacy labels. In: 2022 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), pp. 212\u2013230 (2022). https:\/\/doi.org\/10.1109\/EuroSPW55150.2022.00028","DOI":"10.1109\/EuroSPW55150.2022.00028"},{"key":"589_CR20","unstructured":"Khandelwal, R., Nayak, A., Chung, P., Fawaz, K.: Unpacking Privacy Labels: A Measurement and Developer Perspective on Google\u2019s Data Safety Section (2023)"},{"key":"589_CR21","unstructured":"Castelly, N., Hurley, F.: Introducing Checks: Simplifying Privacy for App Developers - Google: The Keyword. https:\/\/blog.google\/technology\/area-120\/checks\/"},{"key":"589_CR22","doi-asserted-by":"publisher","unstructured":"Li, T., Cranor, L.F., Agarwal, Y., Hong, J.I.: Matcha: An ide plugin for creating accurate privacy nutrition labels. Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies 8(1), 1\u201338 (2024). https:\/\/doi.org\/10.1145\/3643544","DOI":"10.1145\/3643544"},{"key":"589_CR23","unstructured":"Privado.ai: (2022). https:\/\/www.privado.ai\/data-safety-report"},{"key":"589_CR24","doi-asserted-by":"crossref","unstructured":"Rasthofer, S., Arzt, S., Bodden, E.: A machine-learning approach for classifying and categorizing android sources and sinks. In: 2014 Network and Distributed System Security Symposium (NDSS) (2014). https:\/\/www.bodden.de\/pubs\/rab14classifying.pdf","DOI":"10.14722\/ndss.2014.23039"},{"key":"589_CR25","doi-asserted-by":"publisher","unstructured":"Arzt, S., Rasthofer, S., Fritz, C., Bodden, E., Bartel, A., Klein, J., Le\u00a0Traon, Y., Octeau, D., McDaniel, P.: Flowdroid: Precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps. In: Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation. PLDI \u201914, pp. 259\u2013269. Association for Computing Machinery, New York, NY, USA (2014). https:\/\/doi.org\/10.1145\/2594291.2594299","DOI":"10.1145\/2594291.2594299"},{"key":"589_CR26","doi-asserted-by":"publisher","unstructured":"Huang, J., Zhang, X., Tan, L., Wang, P., Liang, B.: Asdroid: Detecting stealthy behaviors in android applications by user interface and program behavior contradiction. In: Proceedings of the 36th International Conference on Software Engineering. ICSE 2014, pp. 1036\u20131046. Association for Computing Machinery, New York, NY, USA (2014). https:\/\/doi.org\/10.1145\/2568225.2568301","DOI":"10.1145\/2568225.2568301"},{"key":"589_CR27","unstructured":"Pandita, R., Xiao, X., Yang, W., Enck, W., Xie, T.: Whyper: Towards automating risk assessment of mobile applications. In: Proceedings of the 22nd USENIX Conference on Security. SEC\u201913, pp. 527\u2013542. USENIX Association, USA (2013)"},{"key":"589_CR28","unstructured":"Huang, J., Li, Z., Xiao, X., Wu, Z., Lu, K., Zhang, X., Jiang, G.: SUPOR: Precise and scalable sensitive user input detection for android apps. In: 24th USENIX Security Symposium (USENIX Security 15), pp. 977\u2013992. USENIX Association, Washington, D.C. (2015). https:\/\/www.usenix.org\/conference\/usenixsecurity15\/technical-sessions\/presentation\/huang"},{"key":"589_CR29","unstructured":"Nan, Y., Yang, M., Yang, Z., Zhou, S., Gu, G., Wang, X.: UIPicker: User-Input privacy identification in mobile applications. In: 24th USENIX Security Symposium (USENIX Security 15), pp. 993\u20131008. USENIX Association, Washington, D.C. (2015). https:\/\/www.usenix.org\/conference\/usenixsecurity15\/technical-sessions\/presentation\/nan"},{"key":"589_CR30","doi-asserted-by":"publisher","unstructured":"Andow, B., Acharya, A., Li, D., Enck, W., Singh, K., Xie, T.: Uiref: analysis of sensitive user inputs in android applications. In: Proceedings of the 10th ACM Conference on Security and Privacy in Wireless and Mobile Networks. WiSec \u201917, pp. 23\u201334. Association for Computing Machinery, New York, NY, USA (2017). https:\/\/doi.org\/10.1145\/3098243.3098247","DOI":"10.1145\/3098243.3098247"},{"key":"589_CR31","doi-asserted-by":"publisher","unstructured":"Tang, F., \u00d8stvold, B.M.: Assessing software privacy using the privacy flow-graph. In: Proceedings of the 1st International Workshop on Mining Software Repositories Applications for Privacy and Security. MSR4P&S 2022, pp. 7\u201315. Association for Computing Machinery, New York, NY, USA (2022). https:\/\/doi.org\/10.1145\/3549035.3561185","DOI":"10.1145\/3549035.3561185"},{"key":"589_CR32","doi-asserted-by":"publisher","unstructured":"Li, L., Bartel, A., Bissyand\u00e9, T.F., Klein, J., Le\u00a0Traon, Y., Arzt, S., Rasthofer, S., Bodden, E., Octeau, D., McDaniel, P.: Iccta: Detecting inter-component privacy leaks in android apps. In: 2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering, vol. 1, pp. 280\u2013291 (2015). https:\/\/doi.org\/10.1109\/ICSE.2015.48","DOI":"10.1109\/ICSE.2015.48"},{"issue":"1","key":"589_CR33","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3643544","volume":"8","author":"T Li","year":"2024","unstructured":"Li, T., Cranor, L.F., Agarwal, Y., Hong, J.I.: Matcha: An ide plugin for creating accurate privacy nutrition labels. Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies 8(1), 1\u201338 (2024). https:\/\/doi.org\/10.1145\/3643544","journal-title":"Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies"},{"key":"589_CR34","doi-asserted-by":"publisher","unstructured":"Piskachev, G., Do, L.N.Q., Johnson, O., Bodden, E.: Swanassist: semi-automated detection of code-specific, security-relevant methods. In: Proceedings of the 34th IEEE\/ACM International Conference on Automated Software Engineering. ASE \u201919, pp. 1094\u20131097. IEEE Press, Piscataway, NJ, USA (2020). https:\/\/doi.org\/10.1109\/ASE.2019.00110","DOI":"10.1109\/ASE.2019.00110"},{"key":"589_CR35","doi-asserted-by":"crossref","unstructured":"Samhi, J., Kober, M., Kabore, A.K., Arzt, S., Bissyand\u00e9, T.F., Klein, J.: Negative results of fusing code and documentation for learning to accurately identify sensitive source and sink methods. In: 2023 30th Edition of the IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER) (2023)","DOI":"10.1109\/SANER56733.2023.00091"},{"key":"589_CR36","doi-asserted-by":"crossref","unstructured":"Kober, M., Samhi, J., Arzt, S., Bissyand\u00e9, T.F., Klein, J.: Sensitive and personal data: What exactly are you talking about? In: 2023 10th International Conference on Mobile Software Engineering and Systems 2023 (MobileSoft) (2023)","DOI":"10.1109\/MOBILSoft59058.2023.00016"},{"key":"589_CR37","unstructured":"Declare your app\u2019s data use (2022). https:\/\/developer.android.com\/privacy-and-security\/declare-data-use"},{"key":"589_CR38","unstructured":"Opinion 04\/2007 on the concept of personal data (2007). https:\/\/www.clinicalstudydatarequest.com\/Documents\/Privacy-European-guidance.pdf"},{"key":"589_CR39","doi-asserted-by":"publisher","unstructured":"Su, J., Shukla, A., Goel, S., Narayanan, A.: De-anonymizing web browsing data with social networks. In: Proceedings of the 26th International Conference on World Wide Web. WWW \u201917, pp. 1261\u20131269. International World Wide Web Conferences Steering Committee, Republic and Canton of Geneva, CHE (2017). https:\/\/doi.org\/10.1145\/3038912.3052714","DOI":"10.1145\/3038912.3052714"},{"key":"589_CR40","doi-asserted-by":"publisher","unstructured":"Kurtz, A., Gascon, H., Becker, T., Rieck, K., Freiling, F.: Fingerprinting mobile devices using personalized configurations. Proceedings on Privacy Enhancing Technologies 2016 (2016). https:\/\/doi.org\/10.1515\/popets-2015-0027","DOI":"10.1515\/popets-2015-0027"},{"key":"589_CR41","unstructured":"AppBrain:(2014). https:\/\/www.appbrain.com\/"},{"key":"589_CR42","unstructured":"Android-apkmirror (2014). https:\/\/www.apkmirror.com\/"},{"key":"589_CR43","doi-asserted-by":"publisher","unstructured":"Karakaya, K., Bodden, E.: Sootfx: A static code feature extraction tool for java and android. In: 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), pp. 181\u2013186 (2021). https:\/\/doi.org\/10.1109\/SCAM52516.2021.00030","DOI":"10.1109\/SCAM52516.2021.00030"},{"key":"589_CR44","unstructured":"Android-apktool (2010). https:\/\/ibotpeaches.github.io\/Apktool\/"},{"key":"589_CR45","doi-asserted-by":"publisher","unstructured":"Vall\u00e9e-Rai, R., Co, P., Gagnon, E., Hendren, L., Lam, P., Sundaresan, V.: Soot: a java bytecode optimization framework. In: CASCON First Decade High Impact Papers. CASCON \u201910, pp. 214\u2013224. IBM Corp., USA (2010). https:\/\/doi.org\/10.1145\/1925805.1925818","DOI":"10.1145\/1925805.1925818"},{"key":"589_CR46","doi-asserted-by":"crossref","unstructured":"Lhot\u00e1k, O., Hendren, L.: Scaling java points-to analysis using spark. In: Proceedings of the 12th International Conference on Compiler Construction. CC\u201903, pp. 153\u2013169. Springer, Berlin, Heidelberg (2003)","DOI":"10.1007\/3-540-36579-6_12"},{"key":"589_CR47","doi-asserted-by":"publisher","unstructured":"Allix, K., Bissyand\u00e9, T.F., Klein, J., Le\u00a0Traon, Y.: Androzoo: collecting millions of android apps for the research community. Association for Computing Machinery, New York, NY, USA (2016). https:\/\/doi.org\/10.1145\/2901739.2903508","DOI":"10.1145\/2901739.2903508"},{"key":"589_CR48","unstructured":"AndroidRank (2011). https:\/\/androidrank.org\/android-most-popular-google-play-apps?price=free"},{"key":"589_CR49","unstructured":"Google\u2019s definition of data collection. (2022). https:\/\/support.google.com\/googleplay\/android-developer\/answer\/10787469?hl=en#zippy=%2Cdata-collection"},{"key":"589_CR50","unstructured":"Anonymization in Data Privacy. (2019). https:\/\/www.theguardian.com\/technology\/2019\/jul\/23\/anonymised-data-never-be-anonymous-enough-study-finds"},{"key":"589_CR51","unstructured":"Sweeney, L.: Simple Demographics Often Identify People Uniquely. http:\/\/dataprivacylab.org\/projects\/identifiability"},{"key":"589_CR52","unstructured":"LibD (2017). https:\/\/github.com\/IIE-LibD\/libd"},{"key":"589_CR53","unstructured":"LibRadar (2016). https:\/\/github.com\/pkumza\/LibRadar"},{"key":"589_CR54","doi-asserted-by":"crossref","unstructured":"Han, H., Li, R., Tang, J.: Identify and inspect libraries in android applications. Wirel. Pers. Commun. 103(1), 491\u2013503 (2018)","DOI":"10.1007\/s11277-018-5456-4"}],"container-title":["Automated Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10515-025-00589-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10515-025-00589-3","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10515-025-00589-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T14:30:29Z","timestamp":1778855429000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10515-025-00589-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1,12]]},"references-count":54,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2026,9]]}},"alternative-id":["589"],"URL":"https:\/\/doi.org\/10.1007\/s10515-025-00589-3","relation":{"has-preprint":[{"id-type":"doi","id":"10.21203\/rs.3.rs-5454195\/v1","asserted-by":"object"}]},"ISSN":["0928-8910","1573-7535"],"issn-type":[{"value":"0928-8910","type":"print"},{"value":"1573-7535","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1,12]]},"assertion":[{"value":"14 November 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"11 December 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 January 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"45"}}