{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,22]],"date-time":"2026-09-22T23:13:00Z","timestamp":1790118780901,"version":"4.0.1"},"publisher-location":"New York, NY, USA","reference-count":49,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,10,27]],"date-time":"2024-10-27T00:00:00Z","timestamp":1729987200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,10,27]]},"DOI":"10.1145\/3691621.3694949","type":"proceedings-article","created":{"date-parts":[[2024,10,22]],"date-time":"2024-10-22T12:18:59Z","timestamp":1729599539000},"page":"176-186","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["Do Android App Developers Accurately Report Collection of Privacy-Related Data?"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-0434-381X","authenticated-orcid":false,"given":"Mugdha","family":"Khedkar","sequence":"first","affiliation":[{"name":"Heinz Nixdorf Institute, Paderborn University, Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-6566-7280","authenticated-orcid":false,"given":"Ambuj Kumar","family":"Mondal","sequence":"additional","affiliation":[{"name":"Paderborn University, Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3470-3647","authenticated-orcid":false,"given":"Eric","family":"Bodden","sequence":"additional","affiliation":[{"name":"Heinz Nixdorf Institute, Paderborn University, Paderborn, Germany"},{"name":"Fraunhofer IEM, Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,10,27]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Retrieved","author":"Opinion","year":"2024","unstructured":"2007. Opinion 04\/2007 on the concept of personal data. Retrieved Aug 14, 2024 from https:\/\/www.clinicalstudydatarequest.com\/Documents\/Privacy-European-guidance.pdf"},{"key":"e_1_3_2_1_2_1","unstructured":"2010. Android-apktool. Retrieved Aug 14 2024 from https:\/\/ibotpeaches.github.io\/Apktool\/"},{"key":"e_1_3_2_1_3_1","unstructured":"2014. Android-apkmirror. Retrieved Aug 14 2024 from https:\/\/www.apkmirror.com\/"},{"key":"e_1_3_2_1_4_1","unstructured":"2014. AppBrain. Retrieved Aug 14 2024 from https:\/\/www.appbrain.com\/"},{"key":"e_1_3_2_1_5_1","unstructured":"2016. LibRadar. Retrieved Aug 14 2024 from https:\/\/github.com\/pkumza\/LibRadar"},{"key":"e_1_3_2_1_6_1","unstructured":"2017. LibD. Retrieved Aug 14 2024 from https:\/\/github.com\/IIE-LibD\/libd"},{"key":"e_1_3_2_1_7_1","volume-title":"Retrieved","year":"2024","unstructured":"2018. The European parliament and the council of the European union. General Data Protection Regulation (GDPR). Retrieved Aug 14, 2024 from https:\/\/eurlex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016R0679"},{"key":"e_1_3_2_1_8_1","volume-title":"Retrieved","year":"2024","unstructured":"2018. What is GDPR? Retrieved Aug 14, 2024 from https:\/\/gdpr.eu\/what-is-gdpr\/"},{"key":"e_1_3_2_1_9_1","volume-title":"Retrieved","year":"2024","unstructured":"2019. Anonymization in Data Privacy. Retrieved Aug 14, 2024 from https:\/\/www.theguardian.com\/technology\/2019\/jul\/23\/anonymised-data-never-be-anonymous-enough-study-finds"},{"key":"e_1_3_2_1_10_1","volume-title":"Retrieved","year":"2024","unstructured":"2020. Apple: Transparency is the best policy. Retrieved Aug 14, 2024 from https:\/\/www.apple.com\/privacy\/labels\/"},{"key":"e_1_3_2_1_11_1","volume-title":"Retrieved","year":"2024","unstructured":"2022. Data Safety Section. Retrieved Aug 14, 2024 from https:\/\/blog.google\/products\/google-play\/data-safety\/"},{"key":"e_1_3_2_1_12_1","volume-title":"Retrieved","year":"2024","unstructured":"2022. Declare your app's data use. Retrieved Aug 14, 2024 from https:\/\/developer.android.com\/privacy-and-security\/declare-data-use"},{"key":"e_1_3_2_1_13_1","volume-title":"Retrieved","year":"2024","unstructured":"2022. Google's definition of data collection. Retrieved Aug 14, 2024 from https:\/\/support.google.com\/googleplay\/android-developer\/answer\/10787469?hl=en#zippy=%2Cdata-collection"},{"key":"e_1_3_2_1_14_1","unstructured":"2022. Privado.ai. Retrieved Aug 14 2024 from https:\/\/www.privado.ai\/data-safety-report"},{"key":"e_1_3_2_1_15_1","volume-title":"Retrieved","year":"2024","unstructured":"2023. Google Play Statistics. Retrieved Aug 14, 2024 from https:\/\/www.statista.com\/statistics\/266210\/number-of-available-applications-in-the-google-play-store\/"},{"key":"e_1_3_2_1_16_1","volume-title":"Retrieved","year":"2024","unstructured":"2023. See No Evil: Loopholes in Google's Data Safety Labels Keep Companies in the Clear and Consumers in the Dark. Retrieved Aug 14, 2024 from https:\/\/foundation.mozilla.org\/en\/campaigns\/googles-data-safety-labels\/"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3098243.3098247"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594299"},{"key":"e_1_3_2_1_19_1","volume-title":"Retrieved","author":"Castelly Nia","year":"2022","unstructured":"Nia Castelly and Fergus Hurley. 2022. Introducing Checks: simplifying privacy for app developers - Google: The Keyword. Retrieved Aug 14, 2024 from https:\/\/blog.google\/technology\/area-120\/checks\/"},{"key":"e_1_3_2_1_20_1","volume-title":"Retrieved","author":"Cavoukian Ann","year":"2009","unstructured":"Ann Cavoukian. 2009. Privacy by design: The 7 foundational principles. Retrieved Aug 14, 2024 from https:\/\/privacy.ucsc.edu\/resources\/privacy-by-design---foundational-principles.pdf"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW55150.2022.00028"},{"key":"e_1_3_2_1_22_1","first-page":"1","article-title":"Identify and Inspect Libraries in Android Applications","volume":"103","author":"Han Hongmu","year":"2018","unstructured":"Hongmu Han, Ruixuan Li, and Junwei Tang. 2018. Identify and Inspect Libraries in Android Applications. Wirel. Pers. Commun. 103, 1 (nov 2018), 491--503.","journal-title":"Wirel. Pers. Commun."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.56553\/POPETS-2024-0010"},{"key":"e_1_3_2_1_24_1","volume-title":"SUPOR: Precise and Scalable Sensitive User Input Detection for Android Apps. In 24th USENIX Security Symposium (USENIX Security 15)","author":"Huang Jianjun","year":"2015","unstructured":"Jianjun Huang, Zhichun Li, Xusheng Xiao, Zhenyu Wu, Kangjie Lu, Xiangyu Zhang, and Guofei Jiang. 2015. SUPOR: Precise and Scalable Sensitive User Input Detection for Android Apps. In 24th USENIX Security Symposium (USENIX Security 15). USENIX Association, Washington, D.C., 977--992. https:\/\/www.usenix.org\/conference\/usenixsecurity15\/technical-sessions\/presentation\/huang"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568301"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM52516.2021.00030"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1572532.1572538"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2470654.2466466"},{"key":"e_1_3_2_1_29_1","unstructured":"Rishabh Khandelwal Asmit Nayak Paul Chung and Kassem Fawaz. 2023. Unpacking Privacy Labels: A Measurement and Developer Perspective on Google's Data Safety Section. arXiv:2306.08111 [cs.CY]"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/MOBILSoft59058.2023.00016"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2015-0027"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.5555\/1765931.1765948"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.48"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3643544"},{"key":"e_1_3_2_1_36_1","unstructured":"M. Jensen C. Lauradoux and K. Limniotis. 2019. Pseudonymisation techniques and best practices. Technical Report. European Union Agency for Cybersecurity (ENISA). https:\/\/www.enisa.europa.eu\/publications\/pseudonymisation-techniques-and-best-practices"},{"key":"e_1_3_2_1_37_1","volume-title":"2014 International Symposium on Information Theory and its Applications. 314--317","author":"Moonsamy Veelasha","year":"2014","unstructured":"Veelasha Moonsamy and Lynn Batten. 2014. Android applications: Data leaks via advertising libraries. In 2014 International Symposium on Information Theory and its Applications. 314--317."},{"key":"e_1_3_2_1_38_1","volume-title":"UIPicker: User-Input Privacy Identification in Mobile Applications. In 24th USENIX Security Symposium (USENIX Security 15)","author":"Nan Yuhong","year":"2015","unstructured":"Yuhong Nan, Min Yang, Zhemin Yang, Shunfan Zhou, Guofei Gu, and XiaoFeng Wang. 2015. UIPicker: User-Input Privacy Identification in Mobile Applications. In 24th USENIX Security Symposium (USENIX Security 15). USENIX Association, Washington, D.C., 993--1008. https:\/\/www.usenix.org\/conference\/usenixsecurity15\/technical-sessions\/presentation\/nan"},{"key":"e_1_3_2_1_39_1","volume-title":"Proceedings of the 22nd USENIX Conference on Security (Washington, D.C.) (SEC'13)","author":"Pandita Rahul","year":"2013","unstructured":"Rahul Pandita, Xusheng Xiao, Wei Yang, William Enck, and Tao Xie. 2013. WHYPER: Towards Automating Risk Assessment of Mobile Applications. In Proceedings of the 22nd USENIX Conference on Security (Washington, D.C.) (SEC'13). USENIX Association, USA, 527--542."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00110"},{"key":"e_1_3_2_1_41_1","volume-title":"Codebase-Adaptive Detection of Security-Relevant Methods. In ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA).","author":"Piskachev Goran","year":"2019","unstructured":"Goran Piskachev, Lisa Nguyen Quang Do, and Eric Bodden. 2019. Codebase-Adaptive Detection of Security-Relevant Methods. In ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23039"},{"key":"e_1_3_2_1_43_1","volume-title":"Steven Arzt, Tegawend\u00e9 F Bissyand\u00e9, and Jacques Klein.","author":"Samhi Jordan","year":"2023","unstructured":"Jordan Samhi, Maria Kober, Abdoul Kader Kabore, Steven Arzt, Tegawend\u00e9 F Bissyand\u00e9, and Jacques Klein. 2023. Negative Results of Fusing Code and Documentation for Learning to Accurately Identify Sensitive Source and Sink Methods. In 2023 30th edition of the IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER).","edition":"30"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","unstructured":"Jessica Su Ansh Shukla Sharad Goel and Arvind Narayanan. 2017. De-Anonymizing Web Browsing Data with Social Networks. In Proceedings of the 26th International Conference on World Wide Web (Perth Australia) (WWW '17). International World Wide Web Conferences Steering Committee Republic and Canton of Geneva CHE 1261--1269. 10.1145\/3038912.3052714","DOI":"10.1145\/3038912.3052714"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00050"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3549035.3561185"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.5555\/781995.782008"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180196"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2016.55"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23034"}],"event":{"name":"ASEW '24: 39th IEEE\/ACM International Conference on Automated Software Engineering Workshops","location":"Sacramento CA USA","acronym":"ASEW '24","sponsor":["SIGAI ACM Special Interest Group on Artificial Intelligence","SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS"]},"container-title":["Proceedings of the 39th IEEE\/ACM International Conference on Automated Software Engineering Workshops"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3691621.3694949","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T01:09:40Z","timestamp":1750295380000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3691621.3694949"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,27]]},"references-count":49,"alternative-id":["10.1145\/3691621.3694949","10.1145\/3691621"],"URL":"https:\/\/doi.org\/10.1145\/3691621.3694949","relation":{},"subject":[],"published":{"date-parts":[[2024,10,27]]},"assertion":[{"value":"2024-10-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}