{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,11]],"date-time":"2025-12-11T03:05:19Z","timestamp":1765422319815,"version":"3.41.2"},"reference-count":71,"publisher":"Association for Computing Machinery (ACM)","issue":"2","license":[{"start":{"date-parts":[[2023,6,12]],"date-time":"2023-06-12T00:00:00Z","timestamp":1686528000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"EPSRC Centre for Doctoral Training in Cyber Security","award":["P00881X\/1"],"award-info":[{"award-number":["P00881X\/1"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. ACM Interact. Mob. Wearable Ubiquitous Technol."],"published-print":{"date-parts":[[2023,6,12]]},"abstract":"<jats:p>This paper critically examines the intersection of privacy concerns in children's apps and the support required by developers to effectively address these concerns. Third-party libraries and software development kits (SDKs) are widely used in mobile app development, however, these libraries are commonly known for posing significant data privacy risks to users. Recent research has shown that app developers for children are particularly struggling with the lack of support in navigating the complex market of third-party SDKs. The support needed for developers to build privacy-friendly apps is largely understudied. Motivated by the needs of developers and an empirical analysis of 137 'expert-approved' children's apps, we designed DataAvalanche.io, a web-based tool to support app developers in navigating the privacy and legal implications associated with common third-party SDKs on the market. Through semi-structured interviews with 12 app developers for children, we demonstrate that app developers largely perceive the transparency supported by our tool positively. However, they raised several barriers, including the challenges of adopting privacy-friendly alternatives and the struggle to safeguard their own legal interests when facing the imbalance of power in the app market. We contribute to our understanding of the open challenges and barriers faced by app developers in creating privacy-friendly apps for children and provide critical future design and policy directions.<\/jats:p>","DOI":"10.1145\/3596267","type":"journal-article","created":{"date-parts":[[2023,6,12]],"date-time":"2023-06-12T18:58:16Z","timestamp":1686596296000},"page":"1-24","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["Navigating the Data Avalanche"],"prefix":"10.1145","volume":"7","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1795-0400","authenticated-orcid":false,"given":"Anirudh","family":"Ekambaranathan","sequence":"first","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6935-9028","authenticated-orcid":false,"given":"Jun","family":"Zhao","sequence":"additional","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2082-2610","authenticated-orcid":false,"given":"George","family":"Chalhoub","sequence":"additional","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,6,12]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"2020. Age appropriate design: a code of practice for online services. https:\/\/ico.org.uk\/media\/for-organisations\/guide-to-data-protection\/key-data-protection-themes\/age-appropriate-design-a-code-of-practice-for-online-services-2-1.pdf."},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.25"},{"key":"e_1_2_1_3_1","doi-asserted-by":"crossref","unstructured":"Amelia Acker and Leanne Bowler. 2018. Youth data literacy: teen perspectives on data created with social media and mobile devices. (2018).","DOI":"10.24251\/HICSS.2018.243"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1257\/jel.54.2.442"},{"key":"e_1_2_1_5_1","first-page":"2022","article-title":"Developers Say the Darnedest Things: Privacy Compliance Processes Followed by Developers of Child-Directed Apps","volume":"4","author":"Alomar Noura","year":"2022","unstructured":"Noura Alomar and Serge Egelman. 2022. Developers Say the Darnedest Things: Privacy Compliance Processes Followed by Developers of Child-Directed Apps. Proceedings on Privacy Enhancing Technologies 4 (2022), 2022.","journal-title":"Proceedings on Privacy Enhancing Technologies"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300519"},{"key":"e_1_2_1_7_1","unstructured":"Jane Bailey. 2015. A perfect storm: How the online environment social norms and law shape girls' lives. (2015)."},{"key":"e_1_2_1_8_1","doi-asserted-by":"crossref","unstructured":"Rebecca Balebako Abigail Marsh Jialiu Lin Jason I Hong and Lorrie Cranor. 2014. The privacy and security behaviors of smartphone app developers. (2014).","DOI":"10.14722\/usec.2014.23006"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1177\/0163443716679033"},{"key":"e_1_2_1_10_1","volume-title":"Amit Elazari Bar On, and Irwin Reyes","author":"Bamberger Kenneth A","year":"2020","unstructured":"Kenneth A Bamberger, Serge Egelman, Catherine Han, Amit Elazari Bar On, and Irwin Reyes. 2020. Can you pay for privacy? consumer expectations and the behavior of free and paid apps. Berkeley Technology Law Journal 35 (2020)."},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1080\/01972243.2019.1583296"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3201064.3201089"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3176246"},{"key":"e_1_2_1_14_1","volume-title":"Longitudinal analysis of android ad library permissions. arXiv preprint arXiv:1303.0857","author":"Book Theodore","year":"2013","unstructured":"Theodore Book, Adam Pridgen, and Dan S Wallach. 2013. Longitudinal analysis of android ad library permissions. arXiv preprint arXiv:1303.0857 (2013)."},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1002\/pra2.2017.14505401004"},{"key":"e_1_2_1_16_1","volume-title":"Children and parents: Media use and attitudes report","author":"Britain Great","year":"2018","unstructured":"Great Britain. 2018. Children and parents: Media use and attitudes report 2018. Ofcom."},{"key":"e_1_2_1_17_1","volume-title":"Children and parents: Media use and attitudes report","author":"Britain Great","year":"2022","unstructured":"Great Britain. 2022. Children and parents: Media use and attitudes report 2022. Ofcom."},{"key":"e_1_2_1_18_1","unstructured":"John Brooke et al. 1996. SUS-A quick and dirty usability scale. Usability evaluation in industry 189 194 (1996) 4--7."},{"key":"e_1_2_1_19_1","unstructured":"Interactive Advertising Bureau. 2015. IAB Internet Advertising Revenue Report: 2015 Full Year Results."},{"key":"e_1_2_1_20_1","volume-title":"Rosanna Di Gioia, and Monica Gemo","author":"Chaudron Stephane","year":"2018","unstructured":"Stephane Chaudron, Rosanna Di Gioia, and Monica Gemo. 2018. Young children (0-8) and digital technology, a qualitative study across Europe. JRC Science for Policy Report (2018)."},{"key":"e_1_2_1_21_1","volume-title":"Sharenting'puts young at risk of online fraud. BBC News 21","author":"Coughlan Sean","year":"2018","unstructured":"Sean Coughlan. 2018. 'Sharenting'puts young at risk of online fraud. BBC News 21 (2018)."},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504733"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3334480.3383064"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445599"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/2593968.2593984"},{"key":"e_1_2_1_26_1","unstructured":"ENISA. 2018. Privacy and data protection in mobile applications: A study on the app development ecosystem and the technical implementation of GDPR."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2185448.2185464"},{"key":"e_1_2_1_28_1","volume-title":"How many interviews are enough? An experiment with data saturation and variability. Field methods 18, 1","author":"Guest Greg","year":"2006","unstructured":"Greg Guest, Arwen Bunce, and Laura Johnson. 2006. How many interviews are enough? An experiment with data saturation and variability. Field methods 18, 1 (2006), 59--82."},{"key":"e_1_2_1_29_1","volume-title":"Joel Reardon, \u00c1lvaro Feal, Serge Egelman, and Narseo Vallina-Rodriguez.","author":"Han Catherine","year":"2019","unstructured":"Catherine Han, Irwin Reyes, Amit Elazari Bar On, Joel Reardon, \u00c1lvaro Feal, Serge Egelman, and Narseo Vallina-Rodriguez. 2019. Do you get what you pay for? Comparing the privacy behaviors of free vs. paid apps. (2019)."},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/223904.223962"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.4135\/9781446280119"},{"key":"e_1_2_1_32_1","volume-title":"Privacy attitudes and privacy behaviour: A review of current research on the privacy paradox phenomenon. Computers & security 64","author":"Kokolakis Spyros","year":"2017","unstructured":"Spyros Kokolakis. 2017. Privacy attitudes and privacy behaviour: A review of current research on the privacy paradox phenomenon. Computers & security 64 (2017), 122--134."},{"key":"e_1_2_1_33_1","volume-title":"Ge Wang, Daniel Omeiza, Helena Webb, and Nigel Shadbolt.","author":"Kollnig Konrad","year":"2021","unstructured":"Konrad Kollnig, Pierre Dewitte, Max Van Kleek, Ge Wang, Daniel Omeiza, Helena Webb, and Nigel Shadbolt. 2021. A Fait Accompli? An Empirical Study into the Absence of Consent to Third-Party Tracking in Android Apps. 181--196. https:\/\/www.usenix.org\/conference\/soups2021\/presentation\/kollnig"},{"key":"e_1_2_1_34_1","volume-title":"Max Van Kleek, and Nigel Shadbolt","author":"Kollnig Konrad","year":"2021","unstructured":"Konrad Kollnig, Anastasia Shuba, Reuben Binns, Max Van Kleek, and Nigel Shadbolt. 2021. Are iPhones Really Better for Privacy? Comparative Study of iOS and Android Apps. arXiv preprint arXiv:2109.13722 (2021)."},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3407057"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3134699"},{"key":"e_1_2_1_37_1","volume-title":"privacy and online media: Framing the right to privacy in public policy-making. First Monday","author":"Lapenta Gry Hasselbalch","year":"2015","unstructured":"Gry Hasselbalch Lapenta and Rikke Frank J\u00f8rgensen. 2015. Youth, privacy and online media: Framing the right to privacy in public policy-making. First Monday (2015)."},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2162081.2162084"},{"key":"e_1_2_1_39_1","first-page":"1","article-title":"Coconut: An IDE plugin for developing privacy-friendly apps","volume":"2","author":"Li Tianshi","year":"2018","unstructured":"Tianshi Li, Yuvraj Agarwal, and Jason I Hong. 2018. Coconut: An IDE plugin for developing privacy-friendly apps. Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies 2, 4 (2018), 1--35.","journal-title":"Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3478097"},{"key":"e_1_2_1_41_1","unstructured":"Jialiu Lin. 2013. Understanding and capturing people's mobile app privacy preferences. Technical Report. CARNEGIE-MELLON UNIV PITTSBURGH PA SCHOOL OF COMPUTER SCIENCE."},{"key":"e_1_2_1_42_1","volume-title":"What do parents think, and do, about their children's online privacy?","author":"Livingstone Sonia","year":"2018","unstructured":"Sonia Livingstone, Alicia Blum-Ross, and Dongmiao Zhang. 2018. What do parents think, and do, about their children's online privacy? (2018)."},{"key":"e_1_2_1_43_1","unstructured":"Sonia Livingstone Julia Davidson Joanne Bryce Saqba Batool Ciaran Haughton and Anulekha Nandi. 2017. Children's online activities risks and safety: a literature review by the UKCCIS evidence group. (2017)."},{"key":"e_1_2_1_44_1","unstructured":"A Longfield. 2018. Who knows what about me."},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1177\/1461444816686328"},{"key":"e_1_2_1_46_1","volume-title":"Fifteenth Symposium on Usable Privacy and Security ({ SOUPS}","author":"Mhaidli Abraham H","year":"2019","unstructured":"Abraham H Mhaidli, Yixin Zou, and Florian Schaub. 2019. \"We can't live without them!\" app developers' adoption of ad networks and their considerations of consumer risks. In Fifteenth Symposium on Usable Privacy and Security ({ SOUPS} 2019)."},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1177\/0270467610365355"},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1177\/1103308814557395"},{"key":"e_1_2_1_49_1","unstructured":"Finn Myrstad and Ingvar Tj\u00f8stheim. 2021. Out of Control. How consumers are exploited by the online advertising industry. (2021)."},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3476883.3520231"},{"key":"e_1_2_1_51_1","unstructured":"Ofcom. 2018. Children and Parents: Media Use and Attitudes."},{"key":"e_1_2_1_52_1","volume-title":"Young People's Understandings of Social Media Data. Social Media+ Society 4, 3","author":"Pangrazio Luci","year":"2018","unstructured":"Luci Pangrazio and Neil Selwyn. 2018. \"It's Not Like It's Life or Death or Whatever\": Young People's Understandings of Social Media Data. Social Media+ Society 4, 3 (2018), 2056305118787808."},{"volume-title":"Privacy online","author":"Peter Jochen","key":"e_1_2_1_53_1","unstructured":"Jochen Peter and Patti M Valkenburg. 2011. Adolescents' online privacy: Toward a developmental perspective. In Privacy online. Springer, 221--234."},{"key":"e_1_2_1_54_1","unstructured":"Google Play. 2022. Expert approved apps. https:\/\/play.google.com\/intl\/en-GB_ALL\/console\/about\/programs\/teacherapproved."},{"key":"e_1_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1177\/0971333615622911"},{"key":"e_1_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.24908\/ss.v12i3.4958"},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2018-0021"},{"key":"e_1_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/223355.223735"},{"key":"e_1_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/2766498.2766523"},{"key":"e_1_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1080\/08838151.2012.732135"},{"key":"e_1_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2015.07.062"},{"key":"e_1_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3091478.3091479"},{"key":"e_1_2_1_63_1","first-page":"1","article-title":"The myth of the privacy paradox. Geo","volume":"89","author":"Solove Daniel J","year":"2021","unstructured":"Daniel J Solove. 2021. The myth of the privacy paradox. Geo. Wash. L. Rev. 89 (2021), 1.","journal-title":"Wash. L. Rev."},{"key":"e_1_2_1_64_1","volume-title":"Deciding on Personalized Ads: Nudging Developers About User Privacy. In Seventeenth Symposium on Usable Privacy and Security (SOUPS","author":"Tahaei Mohammad","year":"2021","unstructured":"Mohammad Tahaei, Alisa Frik, and Kami Vaniea. 2021. Deciding on Personalized Ads: Nudging Developers About User Privacy. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021). 573--596."},{"key":"e_1_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445768"},{"key":"e_1_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411763.3451805"},{"key":"e_1_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-57959-7"},{"key":"e_1_2_1_68_1","volume-title":"Max Van Kleek, and Nigel Shadbolt","author":"Wang Ge","year":"2022","unstructured":"Ge Wang, Jun Zhao, Max Van Kleek, and Nigel Shadbolt. 2022. 'Don't make assumptions about me!': Understanding Children's Perception of Datafication Online. (2022)."},{"key":"e_1_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1098\/rspb.2021.2535"},{"key":"e_1_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300336"},{"key":"e_1_2_1_71_1","doi-asserted-by":"crossref","unstructured":"Sebastian Zimmeck Rafael Goldstein and David Baraka. 2021. PrivacyFlash Pro: Automating Privacy Policy Generation for Mobile Apps.. In NDSS.","DOI":"10.14722\/ndss.2021.24100"}],"container-title":["Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3596267","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3596267","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,14]],"date-time":"2025-07-14T04:45:11Z","timestamp":1752468311000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3596267"}},"subtitle":["Towards Supporting Developers in Developing Privacy-Friendly Children's Apps"],"short-title":[],"issued":{"date-parts":[[2023,6,12]]},"references-count":71,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2023,6,12]]}},"alternative-id":["10.1145\/3596267"],"URL":"https:\/\/doi.org\/10.1145\/3596267","relation":{},"ISSN":["2474-9567"],"issn-type":[{"type":"electronic","value":"2474-9567"}],"subject":[],"published":{"date-parts":[[2023,6,12]]},"assertion":[{"value":"2023-06-12","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}