{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T14:23:55Z","timestamp":1780410235525,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":41,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6,30]]},"DOI":"10.1145\/3765613.3797448","type":"proceedings-article","created":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T13:43:03Z","timestamp":1780407783000},"page":"121-132","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Are Android Developers Following Privacy Guidelines? A Study on Logging Practices of Personal Data"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-8837-0531","authenticated-orcid":false,"given":"Jin","family":"Ouyang","sequence":"first","affiliation":[{"name":"Rochester Institute of Technology, Rochester, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-2322-4393","authenticated-orcid":false,"given":"Tiash","family":"Roy","sequence":"additional","affiliation":[{"name":"Rochester Institute of Technology, Rochester, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8401-7157","authenticated-orcid":false,"given":"Daqing","family":"Hou","sequence":"additional","affiliation":[{"name":"Rochester Institute of Technology, Rochester, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8911-106X","authenticated-orcid":false,"given":"Yuzhe","family":"Tang","sequence":"additional","affiliation":[{"name":"Syracuse University, Syracuse, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3156-906X","authenticated-orcid":false,"given":"Xueling","family":"Zhang","sequence":"additional","affiliation":[{"name":"Rochester Institute of Technology, Rochester, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,29]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2021. DreamHost database leaked 814 million records online including customer data. https:\/\/rb.gy\/cibk0b."},{"key":"e_1_3_2_1_2_1","unstructured":"2023. Fertility app fined $200 000 for leaking customer's health data."},{"key":"e_1_3_2_1_3_1","unstructured":"2024. Apktool: A tool for reverse engineering Android apk files. https:\/\/apktool.org\/."},{"key":"e_1_3_2_1_4_1","unstructured":"2024. AppsFlyer Ad Analytics. https:\/\/www.appsflyer.com\/?utm_source=googl e&utm_medium=cpc&utm_campaign=Search_NA_GG_NEW_Demos_wbcvr _EN_gg[SCH]_st[Brand]_mt[MIX]_23-Feb-21&utm_content=118808559101_ 535967813963&utm_term=appsflyers&afc_source=google&afc_medium=cpc &afc_campaign=Search_NA_GG_NEW_Demos_wbcvr_EN_gg[SCH]_st[Bran d]_mt[MIX]_23-Feb-21&afc_content=118808559101_535967813963&afc_term= appsflyers&gad_source=1&gclid=Cj0KCQjw3tCyBhDBARIsAEY0XNk-I-_LEt aY8x3xftAsHxUqlKlSk5rM0WXGypA_XkoRUoclnhCN5oAaAuE1EALw_wcB."},{"key":"e_1_3_2_1_5_1","unstructured":"2024. Clevertap Analytics. https:\/\/clevertap.com\/?utm_medium=ppc&utm_sour ce=google&utm_term=clevertap&utm_campaign=NAM_EN_Search_Brand& hsa_acc=6435276240&hsa_cam=6766537125&hsa_grp=82487841274&hsa_ad=6 89567488710&hsa_src=g&hsa_tgt=kwd-318900408694&a_kw=clevertap&hs a_mt=p&hsa_net=adwords&hsa_ver=3&gad_source=1&gclid=Cj0KCQjw3tCy BhDBARIsAEY0XNkld19rbkhnX6kGKfb8ksRCzo2G6gP_s9NvTdiUniIiqAvq59 LQKfYaAkCtEALw_wcB."},{"key":"e_1_3_2_1_6_1","unstructured":"2024. CWE-532: Insertion of Sensitive Information into Log File. https:\/\/cwe.mi tre.org\/data\/definitions\/532.html."},{"key":"e_1_3_2_1_7_1","unstructured":"2024. DreamHost: Web Hosting Platform. https:\/\/www.dreamhost.com\/."},{"key":"e_1_3_2_1_8_1","unstructured":"2024. GDPR: Online Identifiers for Profiling and Identification*. https:\/\/gdprinfo. eu\/recitals\/no-30\/."},{"key":"e_1_3_2_1_9_1","unstructured":"2024. GDPR: Personal Data. https:\/\/gdpr-info.eu\/issues\/personal-data\/."},{"key":"e_1_3_2_1_10_1","unstructured":"2024. Google Analytics for Firebase. https:\/\/firebase.google.com\/docs\/analytics."},{"key":"e_1_3_2_1_11_1","unstructured":"2024. Health Wealth Safe App. https:\/\/play.google.com\/store\/apps\/details?id=com.ephibank&hl=en_US."},{"key":"e_1_3_2_1_12_1","unstructured":"2024. Logcat command-line tool. https:\/\/developer.android.com\/tools\/logcat."},{"key":"e_1_3_2_1_13_1","unstructured":"2024. Maestro Analytics. https:\/\/maestroanalytics.com\/."},{"key":"e_1_3_2_1_14_1","unstructured":"2024. Most popular Google play categories. https:\/\/www.appbrain.com\/stats\/android-market-app-categories."},{"key":"e_1_3_2_1_15_1","unstructured":"2024. OkHttp Client. https:\/\/square.github.io\/okhttp\/."},{"key":"e_1_3_2_1_16_1","unstructured":"2024. Privacy Security Best Practices:Logging data. https:\/\/source.android.com\/docs\/security\/best-practices\/privacy."},{"key":"e_1_3_2_1_17_1","unstructured":"2024. Recent Autotrader data breach. https:\/\/www.hookphish.com\/blog\/criticalalert-recent-autotrader-data-breach\/."},{"key":"e_1_3_2_1_18_1","unstructured":"2024. Shoppers. https:\/\/play.google.com\/store\/apps\/details?id=com.shoppers.mobile&hl=en_US."},{"key":"e_1_3_2_1_19_1","unstructured":"2024. Singles Around me - GPS Dating. https:\/\/play.google.com\/store\/apps\/detai ls?id=com.singlesaroundme.android&hl=en_US&gl=US."},{"key":"e_1_3_2_1_20_1","unstructured":"2024. Snitch Shopping App. https:\/\/play.google.com\/store\/apps\/details?id=co.shopney.snitch."},{"key":"e_1_3_2_1_21_1","unstructured":"2024. Understanding Logging: Security and Privacy. https:\/\/source.android.com\/docs\/core\/tests\/debug\/understanding-logging#security-privacy."},{"key":"e_1_3_2_1_22_1","unstructured":"2024. What happened in the Duolingo data breach? https:\/\/play.google.com\/store\/apps\/details?id=com.duolingo&hl=en_US&gl=US."},{"key":"e_1_3_2_1_23_1","unstructured":"2025. Huggingface Chatbot Arena Leaderboard. https:\/\/huggingface.co\/spaces\/lmarena-ai\/chatbot-arena-leaderboard3."},{"key":"e_1_3_2_1_24_1","unstructured":"2025. The Llama 4 Maveric. https:\/\/ai.meta.com\/blog\/llama-4-multimodalintelligence\/."},{"key":"e_1_3_2_1_25_1","unstructured":"2025. Project Website. https:\/\/sites.google.com\/view\/research-artifcats\/home?authuser=3."},{"key":"e_1_3_2_1_26_1","unstructured":"2025. Snitch Privacy Policy. https:\/\/www.snitch.com\/privacy-policy."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2901739.2903508"},{"key":"e_1_3_2_1_28_1","volume-title":"Damien Octeau, and Patrick McDaniel.","author":"Arzt Steven","year":"2014","unstructured":"Steven Arzt, Siegfried Rasthofer, Christian Fritz, Eric Bodden, Alexandre Bartel, Jacques Klein, Yves Le Traon, Damien Octeau, and Patrick McDaniel. 2014. Flowdroid: Precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps. ACM sigplan notices 49, 6 (2014), 259--269."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380408"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2021.301193"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1273463.1273490"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/MobileSoft52590.2021.00013"},{"key":"e_1_3_2_1_33_1","volume-title":"24th USENIX Security Symposium (USENIX Security 15)","author":"Huang Jianjun","year":"2015","unstructured":"Jianjun Huang, Zhichun Li, Xusheng Xiao, Zhenyu Wu, Kangjie Lu, Xiangyu Zhang, and Guofei Jiang. 2015. {SUPOR}: Precise and scalable sensitive user input detection for android apps. In 24th USENIX Security Symposium (USENIX Security 15). 977--992."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.3390\/app13053061"},{"key":"e_1_3_2_1_35_1","volume-title":"32nd USENIX Security Symposium (USENIX Security . 2115--2132","author":"Lyons Allan","year":"2023","unstructured":"Allan Lyons, Julien Gamba, Austin Shawaga, Joel Reardon, Juan Tapiador, Serge Egelman, and Narseo Vallina-Rodr\u00edguez. 2023. Log:{It's} Big,{It's} Heavy,{It's} Filled with Personal Data! Measuring the Logging of Sensitive Information in the Android Ecosystem. In 32nd USENIX Security Symposium (USENIX Security . 2115--2132."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-122"},{"key":"e_1_3_2_1_37_1","volume-title":"Privacy leak identification in third-party android libraries. In 2022 seventh international conference on mobile and secure services (MobiSecServ)","author":"Schindler Christian","unstructured":"Christian Schindler, M\u00fcsl\u00fcm Atas, Thomas Strametz, Johannes Feiner, and Reinhard Hofer. 2022. Privacy leak identification in third-party android libraries. In 2022 seventh international conference on mobile and secure services (MobiSecServ). IEEE, 1--6."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE52982.2021.00058"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-019-09687-9"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102161"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/SANER48275.2020.9054831"}],"event":{"name":"WiSec '26: 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks","location":"Saarbr\u00fccken Germany","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks"],"original-title":[],"deposited":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T13:44:31Z","timestamp":1780407871000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3765613.3797448"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,29]]},"references-count":41,"alternative-id":["10.1145\/3765613.3797448","10.1145\/3765613"],"URL":"https:\/\/doi.org\/10.1145\/3765613.3797448","relation":{},"subject":[],"published":{"date-parts":[[2026,6,29]]},"assertion":[{"value":"2026-06-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}