{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,23]],"date-time":"2026-08-23T17:57:22Z","timestamp":1787507842791,"version":"build-2736575974"},"publisher-location":"New York, NY, USA","reference-count":85,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,9,29]],"date-time":"2022-09-29T00:00:00Z","timestamp":1664409600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"EPSRC","award":["EP\/P011799\/2"],"award-info":[{"award-number":["EP\/P011799\/2"]}]},{"name":"U.S. National Science Foundation","award":["CNS-2055772"],"award-info":[{"award-number":["CNS-2055772"]}]},{"name":"U.S. National Security Agency","award":["H98230-18-D-0006"],"award-info":[{"award-number":["H98230-18-D-0006"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,9,29]]},"DOI":"10.1145\/3549015.3555669","type":"proceedings-article","created":{"date-parts":[[2022,9,8]],"date-time":"2022-09-08T18:11:27Z","timestamp":1662660687000},"page":"117-130","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["Privacy, Permissions, and the Health App Ecosystem: A\u00a0Stack\u00a0Overflow\u00a0Exploration"],"prefix":"10.1145","author":[{"given":"Mohammad","family":"Tahaei","sequence":"first","affiliation":[{"name":"University of Bristol, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Julia","family":"Bernd","sequence":"additional","affiliation":[{"name":"International Computer Science Institute, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Awais","family":"Rashid","sequence":"additional","affiliation":[{"name":"University of Bristol, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,9,29]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.25"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.24"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.24105\/ejbi.2015.11.3.3"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00779-021-01544-1"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/APSEC51365.2020.00029"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.2196\/15654"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0108"},{"key":"e_1_3_2_1_8_1","volume-title":"About the HealthKit Framework | Apple Developer Documentation. Retrieved","year":"2021","unstructured":"Apple. 2021. About the HealthKit Framework | Apple Developer Documentation. Retrieved Dec 2021 from https:\/\/developer.apple.com\/documentation\/healthkit\/about_the_healthkit_framework"},{"key":"e_1_3_2_1_9_1","volume-title":"App Review. Retrieved","year":"2021","unstructured":"Apple. 2021. App Review. Retrieved Dec 2021 from https:\/\/developer.apple.com\/app-store\/review\/"},{"key":"e_1_3_2_1_10_1","volume-title":"Authorizing Access to Health Data | Apple Developer Documentation. Retrieved","year":"2021","unstructured":"Apple. 2021. Authorizing Access to Health Data | Apple Developer Documentation. Retrieved Dec 2021 from https:\/\/developer.apple.com\/documentation\/healthkit\/authorizing_access_to_health_data"},{"key":"e_1_3_2_1_11_1","volume-title":"Protecting User Privacy. Retrieved","year":"2021","unstructured":"Apple. 2021. Protecting User Privacy. Retrieved Dec 2021 from https:\/\/developer.apple.com\/documentation\/healthkit\/protecting_user_privacy"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-021-09995-z"},{"key":"e_1_3_2_1_13_1","volume-title":"Retrieved","author":"Atwood Jeff","year":"2021","unstructured":"Jeff Atwood. 2009. Attribution Required. Stack Overflow. Retrieved Dec 2021 from https:\/\/stackoverflow.blog\/2009\/06\/25\/attribution-required\/"},{"key":"e_1_3_2_1_14_1","volume-title":"Stack Overflow Creative Commons Data Dump. Stack Overflow. Retrieved","author":"Atwood Jeff","year":"2021","unstructured":"Jeff Atwood. 2009. Stack Overflow Creative Commons Data Dump. Stack Overflow. Retrieved Dec 2021 from https:\/\/stackoverflow.blog\/2009\/06\/04\/stack-overflow-creative-commons-data-dump\/"},{"key":"e_1_3_2_1_15_1","volume-title":"Academic Papers Using Stack Overflow Data. Stack Overflow. Retrieved","author":"Atwood Jeff","year":"2021","unstructured":"Jeff Atwood. 2010. Academic Papers Using Stack Overflow Data. Stack Overflow. Retrieved Dec 2021 from https:\/\/stackoverflow.blog\/2010\/05\/31\/academic-papers-using-stack-overflow-data\/"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3022198.3026326"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.14722\/usec.2014.23006"},{"key":"e_1_3_2_1_18_1","volume-title":"Privacy on the Ground: Driving Corporate Behavior in the United States and Europe","author":"Bamberger A","unstructured":"Kenneth\u00a0A Bamberger and Deirdre\u00a0K Mulligan. 2015. Privacy on the Ground: Driving Corporate Behavior in the United States and Europe. MIT Press. https:\/\/mitpress.mit.edu\/books\/privacy-ground"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1080\/01972243.2019.1583296"},{"key":"e_1_3_2_1_20_1","volume-title":"Consumer Reports Finds. Consumer Reports","author":"Beilinson Jerry","year":"2020","unstructured":"Jerry Beilinson. 2020. Glow Pregnancy App Exposed Women to Privacy Threats, Consumer Reports Finds. Consumer Reports (2020). https:\/\/www.consumerreports.org\/mobile-security-software\/glow-pregnancy-app-exposed-women-to-privacy-threats-a1100919965\/ Blog post. Accessed: 9 June 2022."},{"key":"e_1_3_2_1_21_1","volume-title":"iPhone vs Android market share. Retrieved","author":"Casserly Martyn","year":"2022","unstructured":"Martyn Casserly. 2019. iPhone vs Android market share. Retrieved July 2022 from https:\/\/www.macworld.com\/article\/673487\/iphone-vs-android-market-share.html"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1016\/S2589-7500(20)30144-8"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-021-10054-w"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-018-9655-0"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.31"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11920-014-0494-4"},{"key":"e_1_3_2_1_27_1","volume-title":"Get an OAuth 2.0 Client ID. Retrieved","year":"2021","unstructured":"Google. 2021. Get an OAuth 2.0 Client ID. Retrieved Dec 2021 from https:\/\/developers.google.com\/fit\/android\/get-api-key"},{"key":"e_1_3_2_1_28_1","volume-title":"Health Platform API | Android Developers. Retrieved","year":"2021","unstructured":"Google. 2021. Health Platform API | Android Developers. Retrieved Dec 2021 from https:\/\/developer.android.com\/training\/wearables\/health-services\/health-platform"},{"key":"e_1_3_2_1_29_1","volume-title":"OAuth API verification FAQs. Retrieved","year":"2021","unstructured":"Google. 2021. OAuth API verification FAQs. Retrieved Dec 2021 from https:\/\/support.google.com\/cloud\/answer\/9110914"},{"key":"e_1_3_2_1_30_1","volume-title":"Retrieved","author":"Google Release Notes","year":"2021","unstructured":"Google. 2021. Release Notes | Google Fit | Google Developers. Retrieved Dec 2021 from https:\/\/developers.google.cn\/fit\/android\/releases?hl=it"},{"key":"e_1_3_2_1_31_1","volume-title":"Verify your app for use with Google Fit API. Retrieved","year":"2021","unstructured":"Google. 2021. Verify your app for use with Google Fit API. Retrieved Dec 2021 from https:\/\/developers.google.com\/fit\/verification"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1177\/1461444817702397"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9517-1"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.5210\/fm.v25i11.11095"},{"key":"e_1_3_2_1_35_1","volume-title":"Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021","author":"H\u00e4ring Maximilian","year":"2021","unstructured":"Maximilian H\u00e4ring, Eva Gerlitz, Christian Tiefenau, Matthew Smith, Dominik Wermke, Sascha Fahl, and Yasemin Acar. 2021. Never ever or no matter what: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021). USENIX Association, 77\u201398. https:\/\/www.usenix.org\/conference\/soups2021\/presentation\/acar"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-021-10058-6"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-020-09934-4"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.2196\/mhealth.6827"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1001\/jamanetworkopen.2019.2542"},{"key":"e_1_3_2_1_40_1","volume-title":"Health data | ICO. Retrieved","author":"Information Commission","year":"2021","unstructured":"Information Commissioner\u2019s Office. 2021. Health data | ICO. Retrieved Dec 2021 from https:\/\/ico.org.uk\/for-organisations\/guide-to-data-protection\/guide-to-the-general-data-protection-regulation-gdpr\/right-of-access\/health-data\/"},{"key":"e_1_3_2_1_41_1","volume-title":"Proceedings of the 2022 USENIX Security Symposium - SEC\u201922","author":"Kaur Harjot","year":"2022","unstructured":"Harjot Kaur, Sabrina Amft, Daniel Votipka, Yasemin Acar, and Sascha Fahl. 2022. Where to Recruit for Security Development Studies From: Comparing Six Software Developer Samples. In Proceedings of the 2022 USENIX Security Symposium - SEC\u201922."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1572532.1572538"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.2307\/2531695"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","unstructured":"Simon Leigh Rob Daly Sebastian Stevens Luka Lapajne Charlotte Clayton Tim Andrews and Liz Ashall-Payne. 2021. Web-based internet searches for digital health products in the United Kingdom before and during the COVID-19 pandemic: a time-series analysis using app libraries from the Organisation for the Review of Care and Health Applications (ORCHA). BMJ Open 11 10 (2021). https:\/\/doi.org\/10.1136\/bmjopen-2021-053891","DOI":"10.1136\/bmjopen-2021-053891"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3432919"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.3389\/fdgth.2021.649275"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.2196\/jmir.2600"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445132"},{"key":"e_1_3_2_1_49_1","volume-title":"Qualitative Data Analysis: A Methods Sourcebook","author":"Miles Matthew","unstructured":"Matthew Miles and Michael Huberman. 1994. Qualitative Data Analysis: A Methods Sourcebook. Sage."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.2196\/12578"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2999934"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3136649"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2799522"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijlp.2019.04.002"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2022.104707"},{"key":"e_1_3_2_1_56_1","volume-title":"Circumvention of the Android Permissions System. In 28th USENIX Security Symposium (USENIX Security 19)","author":"Reardon Joel","year":"2019","unstructured":"Joel Reardon, \u00c1lvaro Feal, Primal Wijesekera, Amit Elazari\u00a0Bar On, Narseo Vallina-Rodriguez, and Serge Egelman. 2019. 50 Ways to Leak Your Data: An Exploration of Apps\u2019 Circumvention of the Android Permissions System. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 603\u2013620. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/reardon"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2018-0021"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1080\/1369118X.2019.1577475"},{"key":"e_1_3_2_1_59_1","volume-title":"The Coding Manual for Qualitative Researchers","author":"Salda\u00f1a Johnny","unstructured":"Johnny Salda\u00f1a. 2015. The Coding Manual for Qualitative Researchers. Sage."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-021-09943-x"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/3210459.3210484"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10551-017-3504-8"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2020-0083"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/2209249.2209263"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2018.2866769"},{"key":"e_1_3_2_1_66_1","volume-title":"Stack Exchange Data Explorer. Retrieved","author":"Exchange Stack","year":"2021","unstructured":"Stack Exchange. 2021. Stack Exchange Data Explorer. Retrieved Dec 2021 from https:\/\/data.stackexchange.com\/stackoverflow\/queries"},{"key":"e_1_3_2_1_67_1","volume-title":"Mobile operating systems","year":"2012","unstructured":"Statista. 2021. Mobile operating systems\u2019 market share worldwide from January 2012 to June 2021. Retrieved Dec 2021 from https:\/\/www.statista.com\/statistics\/272698\/global-market-share-held-by-mobile-operating-systems-since-2009\/"},{"key":"e_1_3_2_1_68_1","volume-title":"Deciding on Personalized Ads: Nudging Developers About User Privacy. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021","author":"Tahaei Mohammad","year":"2021","unstructured":"Mohammad Tahaei, Alisa Frik, and Kami Vaniea. 2021. Deciding on Personalized Ads: Nudging Developers About User Privacy. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021). USENIX Association, 573\u2013596. https:\/\/www.usenix.org\/conference\/soups2021\/presentation\/tahaei"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445768"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0032"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0059"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW.2019.00021"},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376768"},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","unstructured":"Gioacchino Tangari Muhammad Ikram Kiran Ijaz Mohamed\u00a0Ali Kaafar and Shlomo Berkovsky. 2021. Mobile health and privacy: cross sectional study. BMJ 373(2021). https:\/\/doi.org\/10.1136\/bmj.n1248","DOI":"10.1136\/bmj.n1248"},{"key":"e_1_3_2_1_75_1","volume-title":"General Data Protection Regulation (GDPR). Retrieved","author":"The European Parliament and the Council of the European Union. 2018.","year":"2021","unstructured":"The European Parliament and the Council of the European Union. 2018. General Data Protection Regulation (GDPR). Retrieved Dec 2021 from https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016R0679"},{"key":"e_1_3_2_1_76_1","volume-title":"Health Information Privacy. Retrieved","author":"U.S. Department of Health & Human Services. 2021.","year":"2021","unstructured":"U.S. Department of Health & Human Services. 2021. Health Information Privacy. Retrieved Dec 2021 from https:\/\/www.hhs.gov\/hipaa\/index.html"},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"publisher","unstructured":"Christine Utz Sabrina Amft Martin Degeling Thorsten Holz Sascha Fahl and Florian Schaub. 2022. Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites. https:\/\/doi.org\/10.48550\/ARXIV.2203.11387","DOI":"10.48550\/ARXIV.2203.11387"},{"key":"e_1_3_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445517"},{"key":"e_1_3_2_1_79_1","doi-asserted-by":"publisher","DOI":"10.1177\/2053951716654173"},{"key":"e_1_3_2_1_80_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-019-09750-5"},{"key":"e_1_3_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-78105-1_27"},{"key":"e_1_3_2_1_82_1","article-title":"Designing Without Privacy","volume":"55","author":"Waldman Ari\u00a0Ezra","year":"2018","unstructured":"Ari\u00a0Ezra Waldman. 2018. Designing Without Privacy. Houston Law Review 55, 659 (2018). https:\/\/ssrn.com\/abstract=2944185 NYLS Legal Studies Research Paper No. 2944185. Available via Social Science Research Network. Accessed: 23 November 2018.","journal-title":"Houston Law Review"},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/3463676.3485603"},{"key":"e_1_3_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11390-016-1672-0"},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1080\/1369118X.2018.1543442"}],"event":{"name":"EuroUSEC 2022: 2022 European Symposium on Usable Security","location":"Karlsruhe Germany","acronym":"EuroUSEC 2022"},"container-title":["Proceedings of the 2022 European Symposium on Usable Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3549015.3555669","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3549015.3555669","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T15:00:21Z","timestamp":1750172421000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3549015.3555669"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,9,29]]},"references-count":85,"alternative-id":["10.1145\/3549015.3555669","10.1145\/3549015"],"URL":"https:\/\/doi.org\/10.1145\/3549015.3555669","relation":{},"subject":[],"published":{"date-parts":[[2022,9,29]]},"assertion":[{"value":"2022-09-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}