{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T06:04:13Z","timestamp":1784354653173,"version":"3.55.0"},"reference-count":85,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"7","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/tse.2026.3676979","type":"journal-article","created":{"date-parts":[[2026,3,25]],"date-time":"2026-03-25T19:56:01Z","timestamp":1774468561000},"page":"1995-2012","source":"Crossref","is-referenced-by-count":0,"title":["Assessing Privacy Disclosure Compliance of Android Third-Party SDKs"],"prefix":"10.1109","volume":"52","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1039-2151","authenticated-orcid":false,"given":"Mark Huasong","family":"Meng","sequence":"first","affiliation":[{"name":"University College Dublin, Belfield, Dublin 4, Ireland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4855-1912","authenticated-orcid":false,"given":"Chuan","family":"Yan","sequence":"additional","affiliation":[{"name":"University of Queensland, St Lucia, QLD, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7119-0233","authenticated-orcid":false,"given":"Qing","family":"Zhang","sequence":"additional","affiliation":[{"name":"JD.com, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-5833-1884","authenticated-orcid":false,"given":"Zeyu","family":"Wang","sequence":"additional","affiliation":[{"name":"ByteDance, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3977-6573","authenticated-orcid":false,"given":"Kailong","family":"Wang","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1090-505X","authenticated-orcid":false,"given":"Sin G.","family":"Teo","sequence":"additional","affiliation":[{"name":"Agency for Science, Technology and Research, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6390-9890","authenticated-orcid":false,"given":"Guangdong","family":"Bai","sequence":"additional","affiliation":[{"name":"City University of Hong Kong, Kowloon, Hong Kong, SAR"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6512-8326","authenticated-orcid":false,"given":"Jin Song","family":"Dong","sequence":"additional","affiliation":[{"name":"National University of Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Authenticating on Android with the AppAuth library","author":"Ruiz"},{"key":"ref2","article-title":"Work with data more securely"},{"key":"ref3","article-title":"Analytics for Android"},{"key":"ref4","article-title":"Add ads to your instant app"},{"key":"ref5","article-title":"Develop UI for Android"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3196321.3196341"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2018.8330204"},{"key":"ref8","article-title":"Data breaches caused by 3rd-parties"},{"key":"ref9","article-title":"3rd party libraries: Your next data breach nightmare","author":"Mahajan"},{"key":"ref10","article-title":"How to fix my Android - What is mobile services manager?"},{"key":"ref11","article-title":"What is mobile services manager? Is it a threat? How to fix it?","volume-title":"Social Media Mag.","author":"Mollah","year":"2022"},{"key":"ref12","article-title":"Over 100 apps that sold location data to sketchy data broker revealed","author":"Keegan"},{"key":"ref13","article-title":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing directive 95\/46\/EC (General Data Protection Regulation) (Text with EEA relevance)","year":"2016"},{"key":"ref14","article-title":"California consumer privacy act (CCPA)","year":"2023"},{"key":"ref15","article-title":"Google play SDK index"},{"key":"ref16","article-title":"Nationwide SDK management and service platform (translated from Chinese)","year":"2024"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3349425"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2886875"},{"key":"ref19","first-page":"985","article-title":"Actions speak louder than words: Entity-sensitive privacy policy and data flow analysis with PoliCheck","volume-title":"Proc. 29th USENIX Secur. Symp. (USENIX Security),","author":"Andow","year":"2020"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00137"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670371"},{"key":"ref22","article-title":"Top 22 Android libraries for 2025 every developer needs","author":"Rafalski"},{"key":"ref23","article-title":"Build better, safer SDKs with google play SDK console","author":"Becher"},{"key":"ref24","article-title":"What is an SDK? SDK vs library vs framework","author":"Jaiswal"},{"key":"ref25","article-title":"SDK eligibility for SDK console"},{"key":"ref26","article-title":"Does GDPR apply to mobile apps?","author":"Fich"},{"key":"ref27","article-title":"SDK platform tools release notes"},{"key":"ref28","article-title":"Understanding Android SDK: A comprehensive guide","author":"Oburoh-Kuju"},{"key":"ref29","article-title":"Understand app privacy & security practices with google play\u2019s data safety section"},{"key":"ref30","article-title":"A guide to GDPR data privacy requirements","author":"Wolford"},{"key":"ref31","article-title":"Manifest.permission"},{"key":"ref32","article-title":"Privacy changes in Android 10"},{"key":"ref33","article-title":"Privacy in Android 11"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/2565585.2565593"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987456"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052691"},{"key":"ref37","first-page":"1","article-title":"A longitudinal study of PII leaks across Android app versions","volume-title":"Proc. NDSS","author":"Ren","year":"2018"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2906388.2906392"},{"key":"ref39","first-page":"4133","article-title":"Understanding malicious cross-library data harvesting on Android","volume-title":"Proc. USENIX Secur.","author":"Wang","year":"2021"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30921-2_17"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2015.7249466"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978343"},{"key":"ref44","article-title":"Open anonymous device identifier (OAID)"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484536"},{"key":"ref46","article-title":"Understand & manage your location when you search on Google"},{"key":"ref47","article-title":"Selenium with Python","author":"Muthukadan","year":"2018"},{"key":"ref48","first-page":"585","article-title":"PolicyLint: Investigating internal privacy policy contradictions on google play","volume-title":"Proc. 28th USENIX Secur. Symp. (USENIX Security),","author":"Andow","year":"2019"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3560416"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2016.55"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23034"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.acl-main.441"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833729"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/2666356.2594299"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3213846.3213873"},{"key":"ref56","article-title":"Mariana Trench: Security-focused static analysis for Android and Java applications","year":"2024"},{"key":"ref57","article-title":"AppShark","year":"2022"},{"key":"ref58","article-title":"For large size APK\/code it is consuming heavy battery\/CPU\/memory"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23039"},{"key":"ref60","article-title":"Log Info disclosure"},{"key":"ref61","article-title":"Application sandbox"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23176"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24076"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-44081-7_19"},{"key":"ref65","first-page":"603","article-title":"50 ways to leak your data: An exploration of apps\u2019 circumvention of the Android permissions system","volume-title":"Proc. USENIX Security","author":"Reardon","year":"2019"},{"key":"ref66","article-title":"Mobile vendor market share worldwide"},{"key":"ref67","article-title":"Mobile vendor market share China"},{"key":"ref68","article-title":"SDK runtime"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179338"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568276"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/VLHCC.2018.8506574"},{"key":"ref72","first-page":"527","article-title":"WHYPER: Towards automating risk assessment of mobile applications","volume-title":"Proc. USENIX Secur.","author":"Pandita","year":"2013"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660287"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884855"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180196"},{"key":"ref76","first-page":"1073","article-title":"POLICYCOMP: Counterpart comparison of privacy policies uncovers overbroad personal data collection practices","volume-title":"Proc. USENIX Secur.","author":"Zhou","year":"2022"},{"key":"ref77","first-page":"3667","article-title":"Share first, ask later (or never?) Studying violations of $\\{${GDPR\u2019s$\\}$} explicit consent in Android apps","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Security),","author":"Nguyen","year":"2021"},{"key":"ref78","doi-asserted-by":"crossref","first-page":"1572","DOI":"10.1145\/3377811.3380401","article-title":"How does misconfiguration of analytic services compromise mobile privacy?","volume-title":"Proc. ACM\/IEEE 42nd Int. Conf. Softw. Eng.","author":"Zhang","year":"2020"},{"key":"ref79","first-page":"5681","article-title":"Is it a trap? A large-scale empirical study and comprehensive assessment of online automated privacy policy generators for mobile apps","volume-title":"Proc. 33rd USENIX Secur. Symp. (USENIX Security)","author":"Pan","year":"2024"},{"key":"ref80","first-page":"17","article-title":"Peeping tom in the neighborhood: Keystroke eavesdropping on multi-user systems","volume-title":"Proc. USENIX Security","volume":"20","author":"Zhang","year":"2009"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516661"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/ICDIS.2018.00051"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445599"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2019.2903186"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23353"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/32\/11613940\/11456198.pdf?arnumber=11456198","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T05:26:28Z","timestamp":1784352388000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11456198\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":85,"journal-issue":{"issue":"7"},"URL":"https:\/\/doi.org\/10.1109\/tse.2026.3676979","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]}}}