{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T06:46:05Z","timestamp":1782369965841,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":75,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,4,13]],"date-time":"2026-04-13T00:00:00Z","timestamp":1776038400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,13]]},"DOI":"10.1145\/3772318.3790430","type":"proceedings-article","created":{"date-parts":[[2026,4,13]],"date-time":"2026-04-13T04:12:21Z","timestamp":1776053541000},"page":"1-25","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["From Discovery to Decisions: Archetypal Journeys of Mobile App Users and Their Implications on Privacy"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2545-8088","authenticated-orcid":false,"given":"HTMA","family":"Riyadh","sequence":"first","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany and Computer Science, Saarland University, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-5254-3296","authenticated-orcid":false,"given":"Divyanshu","family":"Bhardwaj","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany and Saarland University, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-6821-6485","authenticated-orcid":false,"given":"Maria Victoria","family":"Hellenthal","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1672-9616","authenticated-orcid":false,"given":"Alexander","family":"Hart","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Saarland, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2425-3013","authenticated-orcid":false,"given":"Katharina","family":"Krombholz","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7151-9614","authenticated-orcid":false,"given":"Sven","family":"Bugiel","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,4,13]]},"reference":[{"key":"e_1_3_3_2_2_2","first-page":"139","volume-title":"Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021)","author":"Abrokwa Desiree","year":"2021","unstructured":"Desiree Abrokwa, Shruti Das, Omer Akgul, and Michelle\u00a0L. Mazurek. 2021. Comparing Security and Privacy Attitudes Among U.S. Users of Different Smartphone and Smart-Speaker Platforms. In Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021). USENIX Association, Vancouver, B.C., Canada (Virtual), 139\u2013158. https:\/\/www.usenix.org\/conference\/soups2021\/presentation\/abrokwa"},{"key":"e_1_3_3_2_3_2","doi-asserted-by":"publisher","DOI":"10.1145\/3491102.3517652"},{"key":"e_1_3_3_2_4_2","unstructured":"Android Developers. 2023. Data Safety Information Is More Visible in Android 14. https:\/\/developer.android.com\/about\/versions\/14\/changes\/data-safety. Last updated May 16 2023. Accessed September 10 2025.."},{"key":"e_1_3_3_2_5_2","unstructured":"Android Developers. 2025. Request runtime permissions. https:\/\/developer.android.com\/training\/permissions\/requesting. Retrieved July 30 2025."},{"key":"e_1_3_3_2_6_2","unstructured":"Apple. 2025. Privacy \u2013 Labels. https:\/\/www.apple.com\/privacy\/labels\/. Accessed August 26 2025."},{"key":"e_1_3_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom50675.2020.00147"},{"key":"e_1_3_3_2_8_2","series-title":"(SSYM\u00a0\u201925)","first-page":"5987","volume-title":"USENIX Security Symposium","author":"Bhardwaj Divyanshu","year":"2025","unstructured":"Divyanshu Bhardwaj, Sumair\u00a0Ijaz Hashmi, Katharina Krombholz, and Maximilian Golla. 2025. Understanding How Users Prepare for and React to Smartphone Theft. In USENIX Security Symposium(SSYM\u00a0\u201925). USENIX, Seattle, Washington, USA, 5987\u20136005."},{"key":"e_1_3_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW55150.2022.00023"},{"key":"e_1_3_3_2_10_2","first-page":"195","volume-title":"Thirteenth Symposium on Usable Privacy and Security (SOUPS 2017)","author":"Bonn\u00e9 Bram","year":"2017","unstructured":"Bram Bonn\u00e9, Sai\u00a0Teja Peddinti, Igor Bilogrevic, and Nina Taft. 2017. Exploring decision making with { Android\u2019s} runtime permission dialogs using in-context surveys. In Thirteenth Symposium on Usable Privacy and Security (SOUPS 2017). USENIX Association, Santa Clara, CA, 195\u2013210. https:\/\/www.usenix.org\/conference\/soups2017\/technical-sessions\/presentation\/bonne"},{"key":"e_1_3_3_2_11_2","doi-asserted-by":"publisher","DOI":"10.1145\/3544548.3581203"},{"key":"e_1_3_3_2_12_2","doi-asserted-by":"crossref","unstructured":"Virginia Braun and Victoria Clarke. 2006. Using thematic analysis in psychology. Qualitative research in psychology 3 2 (2006) 77\u2013101.","DOI":"10.1191\/1478088706qp063oa"},{"key":"e_1_3_3_2_13_2","doi-asserted-by":"crossref","unstructured":"France B\u00e9langer and Robert\u00a0E. Crossler. 2011. Privacy in the Digital Age: A Review of Information Privacy Research in Information Systems. MIS Quarterly 35 4 (2011) 1017\u20131041. http:\/\/www.jstor.org\/stable\/41409971","DOI":"10.2307\/41409971"},{"key":"e_1_3_3_2_14_2","first-page":"803","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Cao Weicheng","year":"2021","unstructured":"Weicheng Cao, Chunqiu Xia, Sai\u00a0Teja Peddinti, David Lie, Nina Taft, and Lisa\u00a0M. Austin. 2021. A Large Scale Study of User Behavior, Expectations and Engagement with Android Permissions. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, Virtual (Vancouver, B.C., Canada), 803\u2013820. https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/cao-weicheng"},{"key":"e_1_3_3_2_15_2","doi-asserted-by":"crossref","unstructured":"Hichang Cho Milagros Rivera-S\u00e1nchez and Sun\u00a0Sun Lim. 2009. A multinational study on online privacy: global concerns and local responses. New media & society 11 3 (2009) 395\u2013416.","DOI":"10.1177\/1461444808101618"},{"key":"e_1_3_3_2_16_2","doi-asserted-by":"crossref","unstructured":"Mary\u00a0J Culnan and Pamela\u00a0K Armstrong. 1999. Information privacy concerns procedural fairness and impersonal trust: An empirical investigation. Organization science 10 1 (1999) 104\u2013115.","DOI":"10.1287\/orsc.10.1.104"},{"key":"e_1_3_3_2_17_2","volume-title":"The Menlo Report: Ethical Principles Guiding Information and Communication Technology Research","author":"Dittrich D","year":"2012","unstructured":"D Dittrich and E Kenneally. 2012. The Menlo Report: Ethical Principles Guiding Information and Communication Technology Research. Technical Report. U.S. Department of Homeland Security. https:\/\/catalog.caida.org\/paper\/2012_menlo_report_actual_formatted"},{"key":"e_1_3_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.230544"},{"key":"e_1_3_3_2_19_2","first-page":"785","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Elbitar Yusra","year":"2021","unstructured":"Yusra Elbitar, Michael Schilling, Trung\u00a0Tin Nguyen, Michael Backes, and Sven Bugiel. 2021. Explanation Beats Context: The Effect of Timing & Rationales on Users\u2019 Runtime Permission Decisions. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, Vancouver, B.C., Canada, 785\u2013802. https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/elbitar"},{"key":"e_1_3_3_2_20_2","doi-asserted-by":"crossref","unstructured":"William Enck Peter Gilbert Byung-Gon Chun Landon\u00a0P. Cox Jaeyeon Jung Patrick McDaniel and Anmol\u00a0N. Sheth. 2014. TaintDroid: an information flow tracking system for real-time privacy monitoring on smartphones. Commun. ACM 57 3 (March 2014) 99\u2013106. doi:10.1145\/2494522","DOI":"10.1145\/2494522"},{"key":"e_1_3_3_2_21_2","doi-asserted-by":"crossref","unstructured":"Anja Endmann and Daniela Ke\u00dfner. 2016. User journey mapping\u2013a method in user experience design. i-com 15 1 (2016) 105\u2013110.","DOI":"10.1515\/icom-2016-0010"},{"key":"e_1_3_3_2_22_2","first-page":"61","volume-title":"Fifteenth Symposium on Usable Privacy and Security (SOUPS 2019)","author":"Faklaris Cori","year":"2019","unstructured":"Cori Faklaris, Laura\u00a0A. Dabbish, and Jason\u00a0I. Hong. 2019. A Self-Report Measure of End-User Security Attitudes (SA-6). In Fifteenth Symposium on Usable Privacy and Security (SOUPS 2019). USENIX Association, Santa Clara, CA, 61\u201377. https:\/\/www.usenix.org\/conference\/soups2019\/presentation\/faklaris"},{"key":"e_1_3_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"},{"key":"e_1_3_3_2_24_2","doi-asserted-by":"crossref","unstructured":"Robert\u00a0J Fisher. 1993. Social desirability bias and the validity of indirect questioning. Journal of consumer research 20 2 (1993) 303\u2013315.","DOI":"10.1086\/209351"},{"key":"e_1_3_3_2_25_2","first-page":"305","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Geeng Christine","year":"2022","unstructured":"Christine Geeng, Mike Harris, Elissa Redmiles, and Franziska Roesner. 2022. \"Like Lesbians Walking the Perimeter\": Experiences of U.S. LGBTQ+ Folks With Online Security, Safety, and Privacy Advice. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA, 305\u2013322. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/geeng"},{"key":"e_1_3_3_2_26_2","unstructured":"Sarah Gibbons. 2018. Journey Mapping 101. https:\/\/www.nngroup.com\/articles\/journey-mapping-101\/. Accessed August 16 2025."},{"key":"e_1_3_3_2_27_2","doi-asserted-by":"crossref","unstructured":"Lisa\u00a0M Gray Gina Wong-Wylie Gwen\u00a0R Rempel and Karen Cook. 2020. Expanding qualitative research interviewing strategies: Zoom video communications. The qualitative report 25 5 (2020) 1292\u20131301.","DOI":"10.46743\/2160-3715\/2020.4212"},{"key":"e_1_3_3_2_28_2","volume-title":"Applied thematic analysis","author":"Guest Greg","year":"2011","unstructured":"Greg Guest, Kathleen\u00a0M MacQueen, and Emily\u00a0E Namey. 2011. Applied thematic analysis. sage publications, California, 91320, US."},{"key":"e_1_3_3_2_29_2","first-page":"2311","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Hielscher Jonas","year":"2023","unstructured":"Jonas Hielscher, Uta Menges, Simon Parkin, Annette Kluge, and M.\u00a0Angela Sasse. 2023. \u201cEmployees Who Don\u2019t Accept the Time Security Takes Are Not Aware Enough\u201d: The CISO View of Human-Centred Security. In 32nd USENIX Security Symposium (USENIX Security 23). USENIX Association, Anaheim, CA, 2311\u20132328. https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/hielscher"},{"key":"e_1_3_3_2_30_2","doi-asserted-by":"crossref","unstructured":"Clara\u00a0E Hill Sarah Knox Barbara\u00a0J Thompson Elizabeth\u00a0Nutt Williams Shirley\u00a0A Hess and Nicholas Ladany. 2005. Consensual qualitative research: an update. Journal of counseling psychology 52 2 (2005) 196.","DOI":"10.1037\/0022-0167.52.2.196"},{"key":"e_1_3_3_2_31_2","doi-asserted-by":"crossref","unstructured":"Clara\u00a0E Hill Barbara\u00a0J Thompson and Elizabeth\u00a0Nutt Williams. 1997. A guide to conducting consensual qualitative research. The counseling psychologist 25 4 (1997) 517\u2013572.","DOI":"10.1177\/0011000097254001"},{"key":"e_1_3_3_2_32_2","doi-asserted-by":"crossref","unstructured":"Tharon Howard. 2014. Journey mapping: a brief overview. Commun. Des. Q. Rev 2 3 (May 2014) 10\u201313. doi:10.1145\/2644448.2644451","DOI":"10.1145\/2644448.2644451"},{"key":"e_1_3_3_2_33_2","first-page":"509","volume-title":"Nineteenth Symposium on Usable Privacy and Security (SOUPS 2023)","author":"Huang Hsiao-Ying","year":"2023","unstructured":"Hsiao-Ying Huang, Soteris Demetriou, Muhammad Hassan, G\u00fcliz\u00a0Seray Tuncay, Carl\u00a0A. Gunter, and Masooda Bashir. 2023. Evaluating User Behavior in Smartphone Security: A Psychometric Perspective. In Nineteenth Symposium on Usable Privacy and Security (SOUPS 2023). USENIX Association, Anaheim, CA, 509\u2013524. https:\/\/www.usenix.org\/conference\/soups2023\/presentation\/huang"},{"key":"e_1_3_3_2_34_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-34638-5_6"},{"key":"e_1_3_3_2_35_2","doi-asserted-by":"publisher","DOI":"10.1145\/2470654.2466466"},{"key":"e_1_3_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623180"},{"key":"e_1_3_3_2_37_2","doi-asserted-by":"publisher","DOI":"10.1145\/3491101.3519630"},{"key":"e_1_3_3_2_38_2","volume-title":"Research methods in human-computer interaction","author":"Lazar Jonathan","year":"2017","unstructured":"Jonathan Lazar, Jinjuan\u00a0Heidi Feng, and Harry Hochheiser. 2017. Research methods in human-computer interaction. Morgan Kaufmann, Cambridge, MA, 02139 US."},{"key":"e_1_3_3_2_39_2","doi-asserted-by":"crossref","unstructured":"Junchao Lin Jason\u00a0I Hong and Laura Dabbish. 2021. \" It\u2019s our mutual responsibility to share\" The Evolution of Account Sharing in Romantic Couples. Proceedings of the ACM on Human-Computer Interaction 5 CSCW1 (2021) 1\u201327.","DOI":"10.1145\/3449234"},{"key":"e_1_3_3_2_40_2","first-page":"199","volume-title":"10th Symposium On Usable Privacy and Security (SOUPS 2014)","author":"Lin Jialiu","year":"2014","unstructured":"Jialiu Lin, Bin Liu, Norman Sadeh, and Jason\u00a0I. Hong. 2014. Modeling Users\u2019 Mobile App Privacy Preferences: Restoring Usability in a Sea of Permission Settings. In 10th Symposium On Usable Privacy and Security (SOUPS 2014). USENIX Association, Menlo Park, CA, 199\u2013212. https:\/\/www.usenix.org\/conference\/soups2014\/proceedings\/presentation\/lin"},{"key":"e_1_3_3_2_41_2","volume-title":"Buyology: How everything we believe about why we buy is wrong","author":"Lindstrom Martin","year":"2012","unstructured":"Martin Lindstrom. 2012. Buyology: How everything we believe about why we buy is wrong. Random House, 1745 Broadway, New York, NY 10019, United States."},{"key":"e_1_3_3_2_42_2","doi-asserted-by":"publisher","DOI":"10.1109\/VLHCC.2018.8506574"},{"key":"e_1_3_3_2_43_2","first-page":"633","volume-title":"Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022)","author":"Malkin Nathan","year":"2022","unstructured":"Nathan Malkin, David Wagner, and Serge Egelman. 2022. Runtime Permissions for Privacy in Proactive Intelligent Assistants. In Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022). USENIX Association, Boston, MA, 633\u2013651. https:\/\/www.usenix.org\/conference\/soups2022\/presentation\/malkin"},{"key":"e_1_3_3_2_44_2","doi-asserted-by":"crossref","unstructured":"Nora McDonald Sarita Schoenebeck and Andrea Forte. 2019. Reliability and Inter-rater Reliability in Qualitative Research: Norms and Guidelines for CSCW and HCI Practice. Proc. ACM Hum.-Comput. Interact. 3 CSCW Article 72 (Nov. 2019) 23\u00a0pages. doi:10.1145\/3359174","DOI":"10.1145\/3359174"},{"key":"e_1_3_3_2_45_2","doi-asserted-by":"publisher","DOI":"10.1145\/3706599.3720075"},{"key":"e_1_3_3_2_46_2","doi-asserted-by":"publisher","DOI":"10.1145\/3706598.3713479"},{"key":"e_1_3_3_2_47_2","unstructured":"Christopher Meyer Andre Schwager et\u00a0al. 2007. Understanding customer experience. Harvard business review 85 2 (2007) 116."},{"key":"e_1_3_3_2_48_2","doi-asserted-by":"publisher","DOI":"10.1145\/2413296.2413305"},{"key":"e_1_3_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.1145\/2742647.2742653"},{"key":"e_1_3_3_2_50_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00012"},{"key":"e_1_3_3_2_51_2","unstructured":"Nielsen Norman Group. 2020. User Journeys vs. User Flows. Online article. https:\/\/www.nngroup.com\/articles\/user-journeys-vs-user-flows\/ Accessed: 2025-07-31."},{"key":"e_1_3_3_2_52_2","unstructured":"Helen Nissenbaum. 2004. Privacy as contextual integrity. Wash. L. Rev. 79 (2004) 119."},{"key":"e_1_3_3_2_53_2","volume-title":"Emotional Design: Why We Love (or Hate) Everyday Things","author":"Norman Don","year":"2003","unstructured":"Don Norman. 2003. Emotional Design: Why We Love (or Hate) Everyday Things. Basic Books, New York."},{"key":"e_1_3_3_2_54_2","volume-title":"The design of everyday things: Revised and expanded edition","author":"Norman Don","year":"2013","unstructured":"Don Norman. 2013. The design of everyday things: Revised and expanded edition. Basic books, New York, US."},{"key":"e_1_3_3_2_55_2","doi-asserted-by":"crossref","unstructured":"John\u00a0L Oliffe Mary\u00a0T Kelly Gabriela Gonzalez\u00a0Montaner and Wellam\u00a0F Yu\u00a0Ko. 2021. Zoom interviews: Benefits and concessions. International journal of qualitative methods 20 (2021) 16094069211053522.","DOI":"10.1177\/16094069211053522"},{"key":"e_1_3_3_2_56_2","doi-asserted-by":"publisher","DOI":"10.1145\/3544548.3580766"},{"key":"e_1_3_3_2_57_2","first-page":"83","volume-title":"Fourteenth Symposium on Usable Privacy and Security (SOUPS 2018)","author":"Park Cheul\u00a0Young","year":"2018","unstructured":"Cheul\u00a0Young Park, Cori Faklaris, Siyan Zhao, Alex Sciuto, Laura Dabbish, and Jason Hong. 2018. Share and Share Alike? An Exploration of Secure Behaviors in Romantic Relationships. In Fourteenth Symposium on Usable Privacy and Security (SOUPS 2018). USENIX Association, Baltimore, MD, 83\u2013102. https:\/\/www.usenix.org\/conference\/soups2018\/presentation\/park"},{"key":"e_1_3_3_2_58_2","unstructured":"European Parliament and Council of\u00a0the European\u00a0Union. 2016. Regulation (EU) 2016\/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation). https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX:32016R0679 OJ L 119 4.5.2016 p. 1\u201388."},{"key":"e_1_3_3_2_59_2","first-page":"453","volume-title":"Twentieth Symposium on Usable Privacy and Security (SOUPS 2024)","author":"Prange Sarah","year":"2024","unstructured":"Sarah Prange, Pascal Knierim, Gabriel Knoll, Felix Dietz, Alexander\u00a0De Luca, and Florian Alt. 2024. \u201cI do (not) need that Feature!\u201d \u2013 Understanding Users\u2019 Awareness and Control of Privacy Permissions on Android Smartphones. In Twentieth Symposium on Usable Privacy and Security (SOUPS 2024). USENIX Association, Philadelphia, PA, 453\u2013472. https:\/\/www.usenix.org\/conference\/soups2024\/presentation\/prange"},{"key":"e_1_3_3_2_60_2","unstructured":"Prolific. 2025. Prolific - Participant recruitment for research. https:\/\/www.prolific.com\/ Accessed: 2025-07-29."},{"key":"e_1_3_3_2_61_2","unstructured":"Qualtrics. 2025. Qualtrics XM: The Leading Experience Management Software. https:\/\/www.qualtrics.com\/. Accessed August 14 2025."},{"key":"e_1_3_3_2_62_2","unstructured":"Adam Richardson. 2010. Using customer journey maps to improve customer experience. Harvard business review 15 1 (2010) 2\u20135."},{"key":"e_1_3_3_2_63_2","doi-asserted-by":"publisher","DOI":"10.1145\/1753326.1753687"},{"key":"e_1_3_3_2_64_2","doi-asserted-by":"crossref","unstructured":"Christie\u00a0N Scollon Chu Kim-Prieto and Ed Diener. 2003. Experience sampling: Promises and pitfalls strengths and weaknesses. Journal of Happiness studies 4 1 (2003) 5\u201334.","DOI":"10.1023\/A:1023605205115"},{"key":"e_1_3_3_2_65_2","first-page":"751","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Shen Bingyu","year":"2021","unstructured":"Bingyu Shen, Lili Wei, Chengcheng Xiang, Yudong Wu, Mingyao Shen, Yuanyuan Zhou, and Xinxin Jin. 2021. Can Systems Explain Permissions Better? Understanding Users\u2019 Misperceptions under Smartphone Runtime Permission Model. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, Vancouver, B.C., Canada, 751\u2013768. https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/shen-bingyu"},{"key":"e_1_3_3_2_66_2","unstructured":"StatCounter Global Stats. 2025. Mobile Operating System Market Share Worldwide. https:\/\/gs.statcounter.com\/os-market-share\/mobile\/worldwide. Accessed August 14 2025."},{"key":"e_1_3_3_2_67_2","doi-asserted-by":"publisher","DOI":"10.1145\/3544548.3581060"},{"key":"e_1_3_3_2_68_2","doi-asserted-by":"publisher","DOI":"10.1145\/2556288.2557400"},{"key":"e_1_3_3_2_69_2","doi-asserted-by":"publisher","DOI":"10.1145\/3715669.3725874"},{"key":"e_1_3_3_2_70_2","doi-asserted-by":"crossref","unstructured":"Amos Tversky and Daniel Kahneman. 1974. Judgment under Uncertainty: Heuristics and Biases: Biases in judgments reveal some heuristics of thinking under uncertainty. science 185 4157 (1974) 1124\u20131131.","DOI":"10.1126\/science.185.4157.1124"},{"key":"e_1_3_3_2_71_2","unstructured":"Mojtaba Vaismoradi and Sherrill Snelgrove. 2019. Theme in Qualitative Content Analysis and Thematic Analysis. Forum: Qualitative Social Research 20 3 (2019) 23. doi:10.17169\/fqs-20.3.3376Article 23."},{"key":"e_1_3_3_2_72_2","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313611"},{"key":"e_1_3_3_2_73_2","doi-asserted-by":"crossref","unstructured":"Tien Wang Trong\u00a0Danh Duong and Charlie\u00a0C Chen. 2016. Intention to disclose personal information via mobile applications: A privacy calculus perspective. International journal of information management 36 4 (2016) 531\u2013542.","DOI":"10.1016\/j.ijinfomgt.2016.03.003"},{"key":"e_1_3_3_2_74_2","doi-asserted-by":"crossref","unstructured":"Ying Wang Yibo Wang Sinan Wang Yepang Liu Chang Xu Shing-Chi Cheung Hai Yu and Zhiliang Zhu. 2022. Runtime permission issues in android apps: Taxonomy practices and ways forward. IEEE Transactions on Software Engineering 49 1 (2022) 185\u2013210.","DOI":"10.1109\/TSE.2022.3148258"},{"key":"e_1_3_3_2_75_2","first-page":"499","volume-title":"24th USENIX Security Symposium (USENIX Security 15)","author":"Wijesekera Primal","year":"2015","unstructured":"Primal Wijesekera, Arjun Baokar, Ashkan Hosseini, Serge Egelman, David Wagner, and Konstantin Beznosov. 2015. Android Permissions Remystified: A Field Study on Contextual Integrity. In 24th USENIX Security Symposium (USENIX Security 15). USENIX Association, Washington, D.C., 499\u2013514. https:\/\/www.usenix.org\/conference\/usenixsecurity15\/technical-sessions\/presentation\/wijesekera"},{"key":"e_1_3_3_2_76_2","doi-asserted-by":"publisher","DOI":"10.4135\/9781446288030"}],"event":{"name":"CHI 2026: CHI Conference on Human Factors in Computing Systems","location":"Barcelona Spain","acronym":"CHI '26","sponsor":["SIGCHI ACM Special Interest Group on Computer-Human Interaction"]},"container-title":["Proceedings of the 2026 CHI Conference on Human Factors in Computing Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3772318.3790430","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T05:47:35Z","timestamp":1782366455000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3772318.3790430"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,13]]},"references-count":75,"alternative-id":["10.1145\/3772318.3790430","10.1145\/3772318"],"URL":"https:\/\/doi.org\/10.1145\/3772318.3790430","relation":{},"subject":[],"published":{"date-parts":[[2026,4,13]]},"assertion":[{"value":"2026-04-13","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}