{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,13]],"date-time":"2026-10-13T11:24:19Z","timestamp":1791890659629,"version":"4.3.4"},"publisher-location":"New York, NY, USA","reference-count":99,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,4,19]],"date-time":"2023-04-19T00:00:00Z","timestamp":1681862400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Engineering and Physical Sciences Research Council","award":["EP\/V011189\/1"],"award-info":[{"award-number":["EP\/V011189\/1"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,4,19]]},"DOI":"10.1145\/3544548.3581060","type":"proceedings-article","created":{"date-parts":[[2023,4,20]],"date-time":"2023-04-20T04:28:44Z","timestamp":1681964924000},"page":"1-24","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":37,"title":["Stuck in the Permissions With You: Developer & End-User Perspectives on App Permissions & Their Privacy Ramifications"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9666-2663","authenticated-orcid":false,"given":"Mohammad","family":"Tahaei","sequence":"first","affiliation":[{"name":"Nokia Bell Labs, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5316-9956","authenticated-orcid":false,"given":"Ruba","family":"Abu-Salma","sequence":"additional","affiliation":[{"name":"King's College London, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0109-1341","authenticated-orcid":false,"given":"Awais","family":"Rashid","sequence":"additional","affiliation":[{"name":"Bristol Cyber Security Group, Department of Computer Science, University of Bristol, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,4,19]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"Users of Different Smartphone and Smart-Speaker Platforms. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021","author":"Abrokwa Desiree","year":"2021","unstructured":"Desiree Abrokwa, Shruti Das, Omer Akgul, and Michelle\u00a0L. Mazurek. 2021. Comparing Security and Privacy Attitudes Among U.S. Users of Different Smartphone and Smart-Speaker Platforms. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021). USENIX Association, 139\u2013158. https:\/\/www.usenix.org\/conference\/soups2021\/presentation\/abrokwa"},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.65"},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2022-0108"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3491102.3517652"},{"key":"e_1_3_2_2_5_1","volume-title":"Accessing private data. Apple. Retrieved","year":"2022","unstructured":"Apple. 2022. Accessing private data. Apple. Retrieved August 2022 from https:\/\/developer.apple.com\/design\/human-interface-guidelines\/patterns\/accessing-private-data\/"},{"key":"e_1_3_2_2_6_1","volume-title":"Control access to information in apps on iPhone. Apple. Retrieved","year":"2022","unstructured":"Apple. 2022. Control access to information in apps on iPhone. Apple. Retrieved August 2022 from https:\/\/support.apple.com\/en-gb\/guide\/iphone\/iph251e92810\/ios"},{"key":"e_1_3_2_2_7_1","volume-title":"Protecting User Privacy. Apple. Retrieved","year":"2022","unstructured":"Apple. 2022. Protecting User Privacy. Apple. Retrieved August 2022 from https:\/\/developer.apple.com\/documentation\/healthkit\/protecting_user_privacy"},{"key":"e_1_3_2_2_8_1","volume-title":"Requesting Authorization for Location Services. Apple. Retrieved","year":"2022","unstructured":"Apple. 2022. Requesting Authorization for Location Services. Apple. Retrieved August 2022 from https:\/\/developer.apple.com\/documentation\/corelocation\/requesting_authorization_for_location_services"},{"key":"e_1_3_2_2_9_1","volume-title":"User Privacy and Data Use. Apple. Retrieved","year":"2022","unstructured":"Apple. 2022. User Privacy and Data Use. Apple. Retrieved November 2022 from https:\/\/developer.apple.com\/app-store\/user-privacy-and-data-use\/"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3344429.3372508"},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/3235924.3235940"},{"key":"e_1_3_2_2_12_1","volume-title":"The Mobile Marketer\u2019s Guide to Mastering User Retention. Clever Tap. Retrieved","author":"Bonnie Emily","year":"2022","unstructured":"Emily Bonnie. 2022. The Mobile Marketer\u2019s Guide to Mastering User Retention. Clever Tap. Retrieved August 2022 from https:\/\/clevertap.com\/blog\/guide-to-user-retention\/"},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1191\/1478088706qp063oa"},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW51379.2020.00035"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","unstructured":"Paolo Calciati Konstantin Kuznetsov Alessandra Gorla and Andreas Zeller. 2020. Automatically Granted Permissions in Android Apps: An Empirical Study on Their Prevalence and on the Potential Threats for Privacy. ACM 114\u2013124. https:\/\/doi.org\/10.1145\/3379597.3387469","DOI":"10.1145\/3379597.3387469"},{"key":"e_1_3_2_2_16_1","volume-title":"Expectations and Engagement with Android Permissions. In 30th USENIX Security Symposium (USENIX Security 21)","author":"Cao Weicheng","year":"2021","unstructured":"Weicheng Cao, Chunqiu Xia, Sai\u00a0Teja Peddinti, David Lie, Nina Taft, and Lisa\u00a0M. Austin. 2021. A Large Scale Study of User Behavior, Expectations and Engagement with Android Permissions. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, 803\u2013820. https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/cao-weicheng"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.5555\/1387649.1387650"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00057"},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2019.05.010"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3469845"},{"key":"e_1_3_2_2_21_1","volume-title":"Explanation Beats Context: The Effect of Timing & Rationales on Users\u2019 Runtime Permission Decisions. In 30th USENIX Security Symposium (USENIX Security 21)","author":"Elbitar Yusra","year":"2021","unstructured":"Yusra Elbitar, Michael Schilling, Trung\u00a0Tin Nguyen, Michael Backes, and Sven Bugiel. 2021. Explanation Beats Context: The Effect of Timing & Rationales on Users\u2019 Runtime Permission Decisions. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, 785\u2013802. https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/elbitar"},{"key":"e_1_3_2_2_22_1","series-title":"Data Protection and Privacy","volume-title":"Data Protection and Artificial Intelligence","author":"Feal \u00c1lvaro","unstructured":"\u00c1lvaro Feal, Julien Gamba, Narseo Vallina-Rodriguez, Primal Wijesekera, Joel Reardon, Serge Egelman, and Juan\u00a0Est\u00e9vez Tapiador. 2021. Don\u2019t Accept Candy from Strangers: An Analysis of Third-Party Mobile SDKs. In Data Protection and Privacy, Volume 13: Data Protection and Artificial Intelligence. Bloomsbury Publishing. https:\/\/hdl.handle.net\/20.500.12761\/779"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046779"},{"key":"e_1_3_2_2_24_1","volume-title":"7th USENIX Workshop on Hot Topics in Security (HotSec 12)","author":"Felt Adrienne\u00a0Porter","year":"2012","unstructured":"Adrienne\u00a0Porter Felt, Serge Egelman, Matthew Finifter, Devdatta Akhawe, and David Wagner. 2012. How to Ask for Permission. In 7th USENIX Workshop on Hot Topics in Security (HotSec 12). USENIX Association, 6\u00a0pages. https:\/\/www.usenix.org\/conference\/hotsec12\/workshop-program\/presentation\/Felt"},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/2381934.2381943"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.5555\/2002168.2002175"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"},{"key":"e_1_3_2_2_28_1","volume-title":"Retrieved","author":"Freelancers Hire","year":"2022","unstructured":"Freelancer. 2022. Hire Freelancers & Find Freelance Jobs Online | Freelancer. Freelancer. Retrieved August 2022 from https:\/\/www.freelancer.co.uk\/"},{"key":"e_1_3_2_2_29_1","volume-title":"Children\u2019s Online Privacy Protection Rule (COPPA). Retrieved","author":"Federal Trade\u00a0Commission (FTC). 1998.","year":"2022","unstructured":"Federal Trade\u00a0Commission (FTC). 1998. Children\u2019s Online Privacy Protection Rule (COPPA). Retrieved August 2022 from https:\/\/www.ftc.gov\/legal-library\/browse\/rules\/childrens-online-privacy-protection-rule-coppa"},{"key":"e_1_3_2_2_30_1","volume-title":"Locations Without Permission. Retrieved","author":"Federal Trade\u00a0Commission (FTC). 2016.","year":"2022","unstructured":"Federal Trade\u00a0Commission (FTC). 2016. Mobile Advertising Network InMobi Settles FTC Charges It Tracked Hundreds of Millions of Consumers\u2019 Locations Without Permission. Retrieved August 2022 from https:\/\/www.ftc.gov\/news-events\/news\/press-releases\/2016\/06\/mobile-advertising-network-inmobi-settles-ftc-charges-it-tracked-hundredsmillions-consumers"},{"key":"e_1_3_2_2_31_1","volume-title":"Retrieved","author":"Android Developers Context","year":"2022","unstructured":"Google. 2022. Context | Android Developers. Google. Retrieved September 2022 from https:\/\/developer.android.com\/reference\/android\/content\/Context.html#revokeSelfPermissionOnKill(java.lang.String)"},{"key":"e_1_3_2_2_32_1","volume-title":"Developer Policy Center. Google. Retrieved","year":"2022","unstructured":"Google. 2022. Developer Policy Center. Google. Retrieved November 2022 from https:\/\/play.google.com\/about\/developer-content-policy\/"},{"key":"e_1_3_2_2_33_1","volume-title":"Permissions on Android. Google. Retrieved","year":"2022","unstructured":"Google. 2022. Permissions on Android. Google. Retrieved August 2022 from https:\/\/developer.android.com\/guide\/topics\/permissions\/overview"},{"key":"e_1_3_2_2_34_1","volume-title":"Permissions updates in Android 11. Google. Retrieved","year":"2022","unstructured":"Google. 2022. Permissions updates in Android 11. Google. Retrieved September 2022 from https:\/\/developer.android.com\/about\/versions\/11\/privacy\/permissions"},{"key":"e_1_3_2_2_35_1","volume-title":"Request location permissions. Google. Retrieved","year":"2022","unstructured":"Google. 2022. Request location permissions. Google. Retrieved August 2022 from https:\/\/developer.android.com\/training\/location\/permissions"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.111"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833756"},{"key":"e_1_3_2_2_38_1","volume-title":"Evaluating and Redefining Smartphone Permissions with Contextualized Justifications for Mobile Augmented Reality Apps. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021","author":"Harborth David","year":"2021","unstructured":"David Harborth and Alisa Frik. 2021. Evaluating and Redefining Smartphone Permissions with Contextualized Justifications for Mobile Augmented Reality Apps. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021). USENIX Association, 513\u2013534. https:\/\/www.usenix.org\/conference\/soups2021\/presentation\/harborth"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833729"},{"key":"e_1_3_2_2_40_1","volume-title":"Qualitative Data Analysis Software | NVivo. QSR International. Retrieved","author":"International QSR","year":"2022","unstructured":"QSR International. 2022. Qualitative Data Analysis Software | NVivo. QSR International. Retrieved May 2022 from https:\/\/www.qsrinternational.com\/nvivo-qualitative-data-analysis-software\/home\/"},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2017-0041"},{"key":"e_1_3_2_2_42_1","volume-title":"Privacy and Security of Browser Extensions. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021","author":"Kariryaa Ankit","year":"2021","unstructured":"Ankit Kariryaa, Gian-Luca Savino, Carolin Stellmacher, and Johannes Sch\u00f6ning. 2021. Understanding Users\u2019 Knowledge about the Privacy and Security of Browser Extensions. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021). USENIX Association, 99\u2013118. https:\/\/www.usenix.org\/conference\/soups2021\/presentation\/kariryaa"},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0033"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.2307\/2529310"},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","unstructured":"Jonathan Lazar Jinjuan\u00a0Heidi Feng and Harry Hochheiser. 2017. Chapter 8 - Interviews and focus groups. In Research Methods in Human Computer Interaction (Second ed.) Jonathan Lazar Jinjuan\u00a0Heidi Feng and Harry Hochheiser (Eds.). Morgan Kaufmann 187\u2013228. https:\/\/doi.org\/10.1016\/B978-0-12-805390-4.00008-X","DOI":"10.1016\/B978-0-12-805390-4.00008-X"},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3287056"},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3432919"},{"key":"e_1_3_2_2_48_1","volume-title":"Retrieved","author":"LinkedIn In.","year":"2022","unstructured":"LinkedIn. 2022. LinkedIn. LinkedIn. Retrieved August 2022 from https:\/\/www.linkedin.com"},{"key":"e_1_3_2_2_49_1","volume-title":"Follow My Recommendations: A Personalized Privacy Assistant for Mobile App Permissions. In Twelfth Symposium on Usable Privacy and Security (SOUPS 2016","author":"Liu Bin","year":"2016","unstructured":"Bin Liu, Mads\u00a0Schaarup Andersen, Florian Schaub, Hazim Almuhimedi, Shikun\u00a0(Aerin) Zhang, Norman Sadeh, Yuvraj Agarwal, and Alessandro Acquisti. 2016. Follow My Recommendations: A Personalized Privacy Assistant for Mobile App Permissions. In Twelfth Symposium on Usable Privacy and Security (SOUPS 2016). USENIX Association, 27\u201341. https:\/\/www.usenix.org\/conference\/soups2016\/technical-sessions\/presentation\/liu"},{"key":"e_1_3_2_2_50_1","volume-title":"Runtime Permissions for Privacy in Proactive Intelligent Assistants. In Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022","author":"Malkin Nathan","year":"2022","unstructured":"Nathan Malkin, David Wagner, and Serge Egelman. 2022. Runtime Permissions for Privacy in Proactive Intelligent Assistants. In Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022). USENIX Association, 633\u2013651. https:\/\/www.usenix.org\/conference\/soups2022\/presentation\/malkin"},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom53373.2021.00033"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1177\/1077800410364740"},{"key":"e_1_3_2_2_53_1","volume-title":"App Developers\u2019 Adoption of Ad Networks and Their Considerations of Consumer Risks. In Fifteenth Symposium on Usable Privacy and Security (SOUPS 2019","author":"Mhaidli H.","year":"2019","unstructured":"Abraham\u00a0H. Mhaidli, Yixin Zou, and Florian Schaub. 2019. \u201cWe Can\u2019t Live Without Them!\u201d App Developers\u2019 Adoption of Ad Networks and Their Considerations of Consumer Risks. In Fifteenth Symposium on Usable Privacy and Security (SOUPS 2019). USENIX Association, 20\u00a0pages. https:\/\/www.usenix.org\/conference\/soups2019\/presentation\/mhaidli"},{"key":"e_1_3_2_2_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025706"},{"key":"e_1_3_2_2_55_1","volume-title":"Qualitative Data Analysis: A Methods Sourcebook","author":"Miles Matthew","unstructured":"Matthew Miles and Michael Huberman. 1994. Qualitative Data Analysis: A Methods Sourcebook. Sage."},{"key":"e_1_3_2_2_56_1","volume-title":"Retrieved","author":"Online Miro","year":"2022","unstructured":"Miro. 2022. Miro | Online Whiteboard for Visual Collaboration. Miro. Retrieved August 2022 from https:\/\/miro.com\/"},{"key":"e_1_3_2_2_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510079"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00012"},{"key":"e_1_3_2_2_59_1","first-page":"119","article-title":"Privacy as Contextual Integrity","volume":"79","author":"Nissenbaum Helen","year":"2004","unstructured":"Helen Nissenbaum. 2004. Privacy as Contextual Integrity. Washington Law Review 79(2004), 119. https:\/\/digitalcommons.law.uw.edu\/wlr\/vol79\/iss1\/10\/","journal-title":"Washington Law Review"},{"key":"e_1_3_2_2_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355584"},{"key":"e_1_3_2_2_61_1","volume-title":"Helping Developers with Permission Requests. Google. Retrieved","author":"Peddinti Sai\u00a0Teia","year":"2022","unstructured":"Sai\u00a0Teia Peddinti, Nina Taft, Igor Bilogrevic, and Pauline Anthonysamy. 2020. Helping Developers with Permission Requests. Google. Retrieved September 2022 from https:\/\/security.googleblog.com\/2020\/02\/helping-developers-with-permission.html"},{"key":"e_1_3_2_2_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3197231.3197246"},{"key":"e_1_3_2_2_63_1","volume-title":"Online participant recruitment for surveys and market research. Prolific. Retrieved","year":"2022","unstructured":"Prolific. 2022. Online participant recruitment for surveys and market research. Prolific. Retrieved August 2022 from https:\/\/www.prolific.co"},{"key":"e_1_3_2_2_64_1","volume-title":"Representative samples. Prolific. Retrieved","year":"2022","unstructured":"Prolific. 2022. Representative samples. Prolific. Retrieved August 2022 from https:\/\/researcher-help.prolific.co\/hc\/en-gb\/articles\/360019236753-Representative-samples"},{"key":"e_1_3_2_2_65_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23353"},{"key":"e_1_3_2_2_66_1","volume-title":"Circumvention of the Android Permissions System. In 28th USENIX Security Symposium (USENIX Security 19)","author":"Reardon Joel","year":"2019","unstructured":"Joel Reardon, \u00c1lvaro Feal, Primal Wijesekera, Amit Elazari\u00a0Bar On, Narseo Vallina-Rodriguez, and Serge Egelman. 2019. 50 Ways to Leak Your Data: An Exploration of Apps\u2019 Circumvention of the Android Permissions System. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, 603\u2013620. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/reardon"},{"key":"e_1_3_2_2_67_1","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2018-0021"},{"key":"e_1_3_2_2_68_1","volume-title":"The Coding Manual for Qualitative Researchers","author":"Salda\u00f1a Johnny","unstructured":"Johnny Salda\u00f1a. 2015. The Coding Manual for Qualitative Researchers. Sage."},{"key":"e_1_3_2_2_69_1","volume-title":"Women in South Asia. In Fourteenth Symposium on Usable Privacy and Security (SOUPS 2018","author":"Sambasivan Nithya","year":"2018","unstructured":"Nithya Sambasivan, Garen Checkley, Amna Batool, Nova Ahmed, David Nemer, Laura\u00a0Sanely Gayt\u00e1n-Lugo, Tara Matthews, Sunny Consolvo, and Elizabeth Churchill. 2018. \u201cPrivacy is not for me, it\u2019s for those rich women\u201d: Performative Privacy Practices on Mobile Phones by Women in South Asia. In Fourteenth Symposium on Usable Privacy and Security (SOUPS 2018). USENIX Association, 127\u2013142. https:\/\/www.usenix.org\/conference\/soups2018\/presentation\/sambasivan"},{"key":"e_1_3_2_2_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025926"},{"key":"e_1_3_2_2_71_1","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM.2019.00034"},{"key":"e_1_3_2_2_72_1","doi-asserted-by":"publisher","DOI":"10.1145\/3197231.3197236"},{"key":"e_1_3_2_2_73_1","volume-title":"Smartphone Runtime Permission Model. In 30th USENIX Security Symposium (USENIX Security 21)","author":"Shen Bingyu","year":"2021","unstructured":"Bingyu Shen, Lili Wei, Chengcheng Xiang, Yudong Wu, Mingyao Shen, Yuanyuan Zhou, and Xinxin Jin. 2021. Can Systems Explain Permissions Better? Understanding Users\u2019 Misperceptions under Smartphone Runtime Permission Model. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, 751\u2013768. https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/shen-bingyu"},{"key":"e_1_3_2_2_74_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10551-017-3504-8"},{"key":"e_1_3_2_2_75_1","volume-title":"Software developer gender distribution worldwide. Statista. Retrieved","year":"2022","unstructured":"Statista. 2020. Software developer gender distribution worldwide. Statista. Retrieved September 2022 from https:\/\/www.statista.com\/statistics\/1126823\/worldwide-developer-gender\/"},{"key":"e_1_3_2_2_76_1","volume-title":"Mobile operating systems","year":"2012","unstructured":"Statista. 2022. Mobile operating systems\u2019 market share worldwide from January 2012 to January 2022. Statista. Retrieved August 2022 from https:\/\/www.statista.com\/statistics\/272698\/global-market-share-held-by-mobile-operating-systems-since-2009\/"},{"key":"e_1_3_2_2_77_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.03.015"},{"key":"e_1_3_2_2_78_1","volume-title":"Mobile App Retention. Business of Apps. Retrieved","author":"Nayden","year":"2022","unstructured":"Nayden tafradzhiyski. 2022. Mobile App Retention. Business of Apps. Retrieved August 2022 from https:\/\/www.businessofapps.com\/guide\/mobile-app-retention\/"},{"key":"e_1_3_2_2_79_1","volume-title":"Deciding on Personalized Ads: Nudging Developers About User Privacy. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021","author":"Tahaei Mohammad","year":"2021","unstructured":"Mohammad Tahaei, Alisa Frik, and Kami Vaniea. 2021. Deciding on Personalized Ads: Nudging Developers About User Privacy. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021). USENIX Association, 573\u2013596. https:\/\/www.usenix.org\/conference\/soups2021\/presentation\/tahaei"},{"key":"e_1_3_2_2_80_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0038"},{"key":"e_1_3_2_2_81_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0059"},{"key":"e_1_3_2_2_82_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW.2019.00021"},{"key":"e_1_3_2_2_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411763.3451805"},{"key":"e_1_3_2_2_84_1","doi-asserted-by":"crossref","unstructured":"Mohammad Tahaei and Kami Vaniea. 2022. Lessons Learned from Recruiting Participants with Programming Skills for Empirical Privacy and Security Studies. 2\u00a0pages. https:\/\/ropes-workshops.github.io\/ropes22\/ 1st International Workshop on Recruiting Participants for Empirical Software Engineering RoPES\u201922.","DOI":"10.1145\/3491102.3501957"},{"key":"e_1_3_2_2_85_1","doi-asserted-by":"publisher","DOI":"10.1145\/3491102.3501957"},{"key":"e_1_3_2_2_86_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445616"},{"key":"e_1_3_2_2_87_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2022.3204364"},{"key":"e_1_3_2_2_88_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376768"},{"key":"e_1_3_2_2_89_1","doi-asserted-by":"publisher","DOI":"10.1145\/2556288.2557400"},{"key":"e_1_3_2_2_90_1","volume-title":"The External Validity of Online Privacy and Security Surveys. In Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022","author":"Tang Jenny","year":"2022","unstructured":"Jenny Tang, Eleanor Birrell, and Ada Lerner. 2022. Replication: How Well Do My Results Generalize Now? The External Validity of Online Privacy and Security Surveys. In Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022). USENIX Association, 367\u2013385. https:\/\/www.usenix.org\/conference\/soups2022\/presentation\/tang"},{"key":"e_1_3_2_2_91_1","volume-title":"General Data Protection Regulation (GDPR). Retrieved","author":"The European Parliament and the Council of the European Union. 2018.","year":"2022","unstructured":"The European Parliament and the Council of the European Union. 2018. General Data Protection Regulation (GDPR). Retrieved September 2022 from https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016R0679"},{"key":"e_1_3_2_2_92_1","volume-title":"Retrieved","year":"2022","unstructured":"Twitter. 2022. Twitter. Twitter. Retrieved August 2022 from https:\/\/twitter.com"},{"key":"e_1_3_2_2_93_1","volume-title":"Retrieved","author":"The World\u2019s Work Marketplace Upwork","year":"2022","unstructured":"Upwork. 2022. Upwork | The World\u2019s Work Marketplace. Upwork. Retrieved August 2022 from https:\/\/www.upwork.com\/"},{"key":"e_1_3_2_2_94_1","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2023-0002"},{"key":"e_1_3_2_2_95_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376754"},{"key":"e_1_3_2_2_96_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510074"},{"key":"e_1_3_2_2_97_1","doi-asserted-by":"publisher","DOI":"10.1145\/2818048.2819941"},{"key":"e_1_3_2_2_98_1","volume-title":"Android Permissions Remystified: A Field Study on Contextual Integrity. In 24th USENIX Security Symposium (USENIX Security 15)","author":"Wijesekera Primal","year":"2015","unstructured":"Primal Wijesekera, Arjun Baokar, Ashkan Hosseini, Serge Egelman, David Wagner, and Konstantin Beznosov. 2015. Android Permissions Remystified: A Field Study on Contextual Integrity. In 24th USENIX Security Symposium (USENIX Security 15). USENIX Association, 499\u2013514. https:\/\/www.usenix.org\/conference\/usenixsecurity15\/technical-sessions\/presentation\/wijesekera"},{"key":"e_1_3_2_2_99_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3173842"}],"event":{"name":"CHI '23: CHI Conference on Human Factors in Computing Systems","location":"Hamburg Germany","acronym":"CHI '23","sponsor":["SIGCHI ACM Special Interest Group on Computer-Human Interaction"]},"container-title":["Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3544548.3581060","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3544548.3581060","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:47:56Z","timestamp":1750178876000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3544548.3581060"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,4,19]]},"references-count":99,"alternative-id":["10.1145\/3544548.3581060","10.1145\/3544548"],"URL":"https:\/\/doi.org\/10.1145\/3544548.3581060","relation":{},"subject":[],"published":{"date-parts":[[2023,4,19]]},"assertion":[{"value":"2023-04-19","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}