{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T00:27:10Z","timestamp":1780532830587,"version":"3.54.1"},"reference-count":37,"publisher":"Association for Computing Machinery (ACM)","issue":"CSCW3","license":[{"start":{"date-parts":[[2021,1,5]],"date-time":"2021-01-05T00:00:00Z","timestamp":1609804800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100006602","name":"Air Force Research Laboratory","doi-asserted-by":"publisher","award":["FA8750-15-2-028"],"award-info":[{"award-number":["FA8750-15-2-028"]}],"id":[{"id":"10.13039\/100006602","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1704087"],"award-info":[{"award-number":["1704087"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. ACM Hum.-Comput. Interact."],"published-print":{"date-parts":[[2021,1,5]]},"abstract":"<jats:p>While online developer forums are major resources of knowledge for application developers, their roles in promoting better privacy practices remain underexplored. In this paper, we conducted a qualitative analysis of a sample of 207 threads (4772 unique posts) mentioning different forms of personal data from the \/r\/androiddev forum on Reddit. We started with bottom-up open coding on the sampled posts to develop a typology of discussions about personal data use and conducted follow-up analyses to understand what types of posts elicited in-depth discussions on privacy issues or mentioned risky data practices. Our results show that Android developers rarely discussed privacy concerns when talking about a specific app design or implementation problem, but often had active discussions around privacy when stimulated by certain external events representing new privacy-enhancing restrictions from the Android operating system, app store policies, or privacy laws. Developers often felt these restrictions could cause considerable cost yet fail to generate any compelling benefit for themselves. Given these results, we present a set of suggestions for Android OS and the app store to design more effective methods to enhance privacy, and for developer forums(e.g., \/r\/androiddev) to encourage more in-depth privacy discussions and nudge developers to think more about privacy.<\/jats:p>","DOI":"10.1145\/3432919","type":"journal-article","created":{"date-parts":[[2021,1,5]],"date-time":"2021-01-05T18:43:37Z","timestamp":1609872217000},"page":"1-28","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":62,"title":["How Developers Talk About Personal Data and What It Means for User Privacy"],"prefix":"10.1145","volume":"4","author":[{"given":"Tianshi","family":"Li","sequence":"first","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Elizabeth","family":"Louie","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Laura","family":"Dabbish","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jason I.","family":"Hong","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,1,5]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","unstructured":"2020. Actions Speak Louder than Words: Entity-Sensitive Privacy Policy and Data Flow Analysis with PoliCheck . In 29th USENIX Security Symposium (USENIX Security 20) . USENIX Association, Boston, MA. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/andow 2020. Actions Speak Louder than Words: Entity-Sensitive Privacy Policy and Data Flow Analysis with PoliCheck. In 29th USENIX Security Symposium (USENIX Security 20). USENIX Association, Boston, MA. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/andow"},{"key":"e_1_2_1_2_1","unstructured":"2020. Art. 4 GDPR ' Definitions | General Data Protection Regulation (GDPR). http:\/\/web.archive.org\/web\/20200530095018\/https:\/\/gdpr-info.eu\/art-4-gdpr\/. (Accessed on 05\/30\/2020).  2020. Art. 4 GDPR ' Definitions | General Data Protection Regulation (GDPR). http:\/\/web.archive.org\/web\/20200530095018\/https:\/\/gdpr-info.eu\/art-4-gdpr\/. (Accessed on 05\/30\/2020)."},{"key":"e_1_2_1_3_1","unstructured":"2020. Fair Information Practice Principles. http:\/\/web.archive.org\/web\/20200309081014\/https:\/\/iapp.org\/resources\/article\/fair-information-practices\/. (Accessed on 05\/31\/2020).  2020. Fair Information Practice Principles. http:\/\/web.archive.org\/web\/20200309081014\/https:\/\/iapp.org\/resources\/article\/fair-information-practices\/. (Accessed on 05\/31\/2020)."},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/ms.2017.31"},{"key":"e_1_2_1_5_1","volume-title":"Mining Apps for Abnormal Usage of Sensitive Data. In 2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering. IEEE. https:\/\/doi.org\/10","author":"Avdiienko Vitalii","year":"2015","unstructured":"Vitalii Avdiienko , Konstantin Kuznetsov , Alessandra Gorla , Andreas Zeller , Steven Arzt , Siegfried Rasthofer , and Eric Bodden . 2015 . Mining Apps for Abnormal Usage of Sensitive Data. In 2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering. IEEE. https:\/\/doi.org\/10 .1109\/icse.2015.61 10.1109\/icse.2015.61 Vitalii Avdiienko, Konstantin Kuznetsov, Alessandra Gorla, Andreas Zeller, Steven Arzt, Siegfried Rasthofer, and Eric Bodden. 2015. Mining Apps for Abnormal Usage of Sensitive Data. In 2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering. IEEE. https:\/\/doi.org\/10.1109\/icse.2015.61"},{"key":"e_1_2_1_6_1","volume-title":"Harnessing Stack Overflow for the IDE. In 2012 Third International Workshop on Recommendation Systems for Software Engineering (RSSE). IEEE. https:\/\/doi.org\/10","author":"Bacchelli Alberto","year":"2012","unstructured":"Alberto Bacchelli , Luca Ponzanelli , and Michele Lanza . 2012 . Harnessing Stack Overflow for the IDE. In 2012 Third International Workshop on Recommendation Systems for Software Engineering (RSSE). IEEE. https:\/\/doi.org\/10 .1109\/rsse.2012.6233404 10.1109\/rsse.2012.6233404 Alberto Bacchelli, Luca Ponzanelli, and Michele Lanza. 2012. Harnessing Stack Overflow for the IDE. In 2012 Third International Workshop on Recommendation Systems for Software Engineering (RSSE). IEEE. https:\/\/doi.org\/10.1109\/rsse.2012.6233404"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.14722\/usec.2014.23006"},{"key":"e_1_2_1_8_1","first-page":"3","article-title":"What are developers talking about? An analysis of topics and trends in Stack Overflow","volume":"19","author":"Barua Anton","year":"2012","unstructured":"Anton Barua , Stephen W. Thomas , and Ahmed E. Hassan . 2012 . What are developers talking about? An analysis of topics and trends in Stack Overflow . Empirical Software Engineering , Vol. 19 , 3 (nov 2012), 619--654. https:\/\/doi.org\/10.1007\/s10664-012-9231-y 10.1007\/s10664-012-9231-y Anton Barua, Stephen W. Thomas, and Ahmed E. Hassan. 2012. What are developers talking about? An analysis of topics and trends in Stack Overflow. Empirical Software Engineering, Vol. 19, 3 (nov 2012), 619--654. https:\/\/doi.org\/10.1007\/s10664-012-9231-y","journal-title":"Empirical Software Engineering"},{"key":"e_1_2_1_9_1","first-page":"248","article-title":"Secrets","volume":"37","author":"Slssela Bok Helena B\u00e9","year":"1987","unstructured":"Helena B\u00e9 jar and Slssela Bok . 1987 . \" Secrets \" (On the Ethics of Concealment and Revelation). Reis 37 (1987), 248 . https:\/\/doi.org\/10.2307\/40183271 10.2307\/40183271 Helena B\u00e9 jar and Slssela Bok. 1987. \"Secrets\" (On the Ethics of Concealment and Revelation). Reis 37 (1987), 248. https:\/\/doi.org\/10.2307\/40183271","journal-title":"(On the Ethics of Concealment and Revelation). Reis"},{"key":"e_1_2_1_10_1","volume-title":"Proceedings of the 27th international conference on Human factors in computing systems - CHI 09","author":"Brandt Joel","year":"1870","unstructured":"Joel Brandt , Philip J. Guo , Joel Lewenstein , Mira Dontcheva , and Scott R. Klemmer . 2009. Two studies of opportunistic programming: interleaving web foraging, learning, and writing code . In Proceedings of the 27th international conference on Human factors in computing systems - CHI 09 . ACM Press. https:\/\/doi.org\/10.1145\/15 1870 1.1518944 10.1145\/1518701.1518944 Joel Brandt, Philip J. Guo, Joel Lewenstein, Mira Dontcheva, and Scott R. Klemmer. 2009. Two studies of opportunistic programming: interleaving web foraging, learning, and writing code. In Proceedings of the 27th international conference on Human factors in computing systems - CHI 09. ACM Press. https:\/\/doi.org\/10.1145\/1518701.1518944"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132029"},{"key":"e_1_2_1_12_1","volume-title":"Strategies of qualitative inquiry","author":"Denzin Norman K","unstructured":"Norman K Denzin and Yvonna S Lincoln . 2008. Strategies of qualitative inquiry . Vol. 2 . Sage . Norman K Denzin and Yvonna S Lincoln. 2008. Strategies of qualitative inquiry. Vol. 2. Sage."},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.31"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1541948.1541999"},{"key":"e_1_2_1_15_1","first-page":"4","article-title":"Platform privacies: Governance, collaboration, and the different meanings of textquotedblleftprivacytextquotedblright in iOS and Android development","volume":"20","author":"Greene Daniel","year":"2017","unstructured":"Daniel Greene and Katie Shilton . 2017 . Platform privacies: Governance, collaboration, and the different meanings of textquotedblleftprivacytextquotedblright in iOS and Android development . New Media & Society , Vol. 20 , 4 (apr 2017), 1640--1657. https:\/\/doi.org\/10.1177\/1461444817702397 10.1177\/1461444817702397 Daniel Greene and Katie Shilton. 2017. Platform privacies: Governance, collaboration, and the different meanings of textquotedblleftprivacytextquotedblright in iOS and Android development. New Media & Society, Vol. 20, 4 (apr 2017), 1640--1657. https:\/\/doi.org\/10.1177\/1461444817702397","journal-title":"New Media & Society"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376511"},{"key":"e_1_2_1_17_1","first-page":"1","article-title":"Privacy by designers: software developers' privacy mindset","volume":"23","author":"Hadar Irit","year":"2017","unstructured":"Irit Hadar , Tomer Hasson , Oshrat Ayalon , Eran Toch , Michael Birnhack , Sofia Sherman , and Arod Balissa . 2017 . Privacy by designers: software developers' privacy mindset . Empirical Software Engineering , Vol. 23 , 1 (apr 2017), 259--289. https:\/\/doi.org\/10.1007\/s10664-017--9517--1 10.1007\/s10664-017--9517--1 Irit Hadar, Tomer Hasson, Oshrat Ayalon, Eran Toch, Michael Birnhack, Sofia Sherman, and Arod Balissa. 2017. Privacy by designers: software developers' privacy mindset. Empirical Software Engineering, Vol. 23, 1 (apr 2017), 259--289. https:\/\/doi.org\/10.1007\/s10664-017--9517--1","journal-title":"Empirical Software Engineering"},{"key":"e_1_2_1_18_1","volume-title":"Inside the nudge unit: How small changes can make a big difference","author":"Halpern David","unstructured":"David Halpern . 2015. Inside the nudge unit: How small changes can make a big difference . Random House . David Halpern. 2015. Inside the nudge unit: How small changes can make a big difference. Random House."},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-020-09819-6"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3287056"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2370216.2370290"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2013.6624014"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/VLHCC.2018.8506574"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23287"},{"key":"e_1_2_1_25_1","volume-title":"Privacy in context: Technology, policy, and the integrity of social life","author":"Nissenbaum Helen","unstructured":"Helen Nissenbaum . 2009. Privacy in context: Technology, policy, and the integrity of social life . Stanford University Press . Helen Nissenbaum. 2009. Privacy in context: Technology, policy, and the integrity of social life. Stanford University Press."},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355584"},{"key":"e_1_2_1_27_1","volume-title":"The coding manual for qualitative researchers","author":"Johnny Salda","unstructured":"Johnny Salda na. 2015. The coding manual for qualitative researchers . Sage . Johnny Salda na. 2015. The coding manual for qualitative researchers. Sage."},{"key":"e_1_2_1_28_1","volume-title":"Philosophical dimensions of privacy: An anthology","author":"Schoeman Ferdinand David","unstructured":"Ferdinand David Schoeman . 1984. Philosophical dimensions of privacy: An anthology . Cambridge University Press . Ferdinand David Schoeman. 1984. Philosophical dimensions of privacy: An anthology. Cambridge University Press."},{"key":"e_1_2_1_29_1","volume-title":"Proceedings of the 22nd International Conference on Evaluation and Assessment in Software Engineering 2018 - EASEtextquote'18","author":"Senarath Awanthika","unstructured":"Awanthika Senarath and Nalin A. G. Arachchilage . 2018. Why developers cannot embed privacy into software systems?: An empirical investigation . In Proceedings of the 22nd International Conference on Evaluation and Assessment in Software Engineering 2018 - EASEtextquote'18 . ACM Press. https:\/\/doi.org\/10.1145\/3210459.3210484 10.1145\/3210459.3210484 Awanthika Senarath and Nalin A. G. Arachchilage. 2018. Why developers cannot embed privacy into software systems?: An empirical investigation. In Proceedings of the 22nd International Conference on Evaluation and Assessment in Software Engineering 2018 - EASEtextquote'18. ACM Press. https:\/\/doi.org\/10.1145\/3210459.3210484"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568244"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376768"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354212"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/socialcom.2013.35"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2591971.2592003"},{"key":"e_1_2_1_35_1","volume-title":"Communities of practice: The organizational frontier. Harvard business review","author":"Wenger Etienne C","year":"2000","unstructured":"Etienne C Wenger and William M Snyder . 2000. Communities of practice: The organizational frontier. Harvard business review , Vol. 78 , 1 ( 2000 ), 139--146. Etienne C Wenger and William M Snyder. 2000. Communities of practice: The organizational frontier. Harvard business review, Vol. 78, 1 (2000), 139--146."},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274726"},{"key":"e_1_2_1_37_1","first-page":"2","article-title":"How do developers utilize source code from stack overflow","volume":"24","author":"Wu Yuhao","year":"2018","unstructured":"Yuhao Wu , Shaowei Wang , Cor-Paul Bezemer , and Katsuro Inoue . 2018 . How do developers utilize source code from stack overflow ? Empirical Software Engineering , Vol. 24 , 2 (jul 2018, 637--673. https:\/\/doi.org\/10.1007\/s10664-018-9634-5 10.1007\/s10664-018-9634-5 Yuhao Wu, Shaowei Wang, Cor-Paul Bezemer, and Katsuro Inoue. 2018. How do developers utilize source code from stack overflow? Empirical Software Engineering, Vol. 24, 2 (jul 2018, 637--673. https:\/\/doi.org\/10.1007\/s10664-018-9634-5","journal-title":"Empirical Software Engineering"}],"container-title":["Proceedings of the ACM on Human-Computer Interaction"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3432919","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3432919","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3432919","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:47:11Z","timestamp":1750193231000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3432919"}},"subtitle":["A Case Study of a Developer Forum on Reddit"],"short-title":[],"issued":{"date-parts":[[2021,1,5]]},"references-count":37,"journal-issue":{"issue":"CSCW3","published-print":{"date-parts":[[2021,1,5]]}},"alternative-id":["10.1145\/3432919"],"URL":"https:\/\/doi.org\/10.1145\/3432919","relation":{},"ISSN":["2573-0142"],"issn-type":[{"value":"2573-0142","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,1,5]]},"assertion":[{"value":"2021-01-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}