{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T08:29:45Z","timestamp":1792744185169,"version":"4.5.0"},"reference-count":81,"publisher":"Privacy Enhancing Technologies Symposium Advisory Board","issue":"2","license":[{"start":{"date-parts":[[2022,3,3]],"date-time":"2022-03-03T00:00:00Z","timestamp":1646265600000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by-nc-nd\/3.0"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,4,1]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>While many studies have looked at privacy properties of the Android and Google Play app ecosystem, comparatively much less is known about iOS and the Apple App Store, the most widely used ecosystem in the US. At the same time, there is increasing competition around privacy between these smartphone operating system providers. In this paper, we present a study of 24k Android and iOS apps from 2020 along several dimensions relating to user privacy. We find that third-party tracking and the sharing of unique user identifiers was widespread in apps from both ecosystems, even in apps aimed at children. In the children\u2019s category, iOS apps tended to use fewer advertising-related tracking than their Android counterparts, but could more often access children\u2019s location. Across all studied apps, our study highlights widespread potential violations of US, EU and UK privacy law, including 1) the use of third-party tracking without user consent, 2) the lack of parental consent before sharing personally identifiable information (PII) with third-parties in children\u2019s apps, 3) the non-data-minimising configuration of tracking libraries, 4) the sending of personal data to countries without an adequate level of data protection, and 5) the continued absence of transparency around tracking, partly due to design decisions by Apple and Google. Overall, we find that neither platform is clearly better than the other for privacy across the dimensions we studied.<\/jats:p>","DOI":"10.2478\/popets-2022-0033","type":"journal-article","created":{"date-parts":[[2022,3,5]],"date-time":"2022-03-05T04:26:04Z","timestamp":1646454364000},"page":"6-24","source":"Crossref","is-referenced-by-count":44,"title":["Are iPhones Really Better for Privacy? A Comparative Study of iOS and Android Apps"],"prefix":"10.56553","volume":"2022","author":[{"given":"Konrad","family":"Kollnig","sequence":"first","affiliation":[{"name":"Department of Computer Science , University of Oxford"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Anastasia","family":"Shuba","sequence":"additional","affiliation":[{"name":"Independent Researcher"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Reuben","family":"Binns","sequence":"additional","affiliation":[{"name":"Department of Computer Science , University of Oxford"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Max","family":"Van Kleek","sequence":"additional","affiliation":[{"name":"Department of Computer Science , University of Oxford"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nigel","family":"Shadbolt","sequence":"additional","affiliation":[{"name":"Department of Computer Science , University of Oxford"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"35752","published-online":{"date-parts":[[2022,3,3]]},"reference":[{"key":"2022060207221977157_j_popets-2022-0033_ref_001","unstructured":"[1] Hal Abelson, Ross Anderson, Steven M. Bellovin, Josh Benaloh, Matt Blaze, Jon Callas, Whitfield Diffie, Susan Landau, Peter G. Neumann, Ronald L. Rivest, Jeffrey I. Schiller, Bruce Schneier, Vanessa Teague, and Carmela Troncoso. Bugs in our Pockets: The Risks of Client-Side Scanning. arXiv preprint arXiv:2110.07450, 2021."},{"key":"2022060207221977157_j_popets-2022-0033_ref_002","doi-asserted-by":"crossref","unstructured":"[2] A. Acquisti, L. Brandimarte, and G. Loewenstein. Privacy and Human Behavior in the Age of Information. Science, 347(6221):509\u2013514, 2015.10.1126\/science.aaa146525635091","DOI":"10.1126\/science.aaa1465"},{"key":"2022060207221977157_j_popets-2022-0033_ref_003","doi-asserted-by":"crossref","unstructured":"[3] Alessandro Acquisti. Nudging Privacy: The Behavioral Economics of Personal Information. IEEE Security & Privacy Magazine, 7(6):82\u201385, 2009.","DOI":"10.1109\/MSP.2009.163"},{"key":"2022060207221977157_j_popets-2022-0033_ref_004","doi-asserted-by":"crossref","unstructured":"[4] Yuvraj Agarwal and Malcolm Hall. ProtectMyPrivacy: Detecting and Mitigating Privacy Leaks on iOS Devices Using Crowdsourcing. In Proceeding of the 11th Annual International Conference on Mobile Systems, Applications, and Services - MobiSys \u201913, Taipei, Taiwan, 2013. ACM Press.10.1145\/2462456.2464460","DOI":"10.1145\/2462456.2464460"},{"key":"2022060207221977157_j_popets-2022-0033_ref_005","unstructured":"[5] Alphabet. FORM 10-K. https:\/\/abc.xyz\/investor\/static\/pdf\/20210203_alphabet_10K.pdf?cache=b44182d, 2020."},{"key":"2022060207221977157_j_popets-2022-0033_ref_006","unstructured":"[6] Apple. App Store Review Guidelines. https:\/\/developer.apple.com\/app-store\/review\/guidelines\/."},{"key":"2022060207221977157_j_popets-2022-0033_ref_007","unstructured":"[7] Apple. Updates to the App Store Review Guidelines. https:\/\/developer.apple.com\/news\/?id=06032019j, 2019."},{"key":"2022060207221977157_j_popets-2022-0033_ref_008","unstructured":"[8] Apple. Expanded Protections for Children. https:\/\/www.apple.com\/child-safety\/, 2021."},{"key":"2022060207221977157_j_popets-2022-0033_ref_009","doi-asserted-by":"crossref","unstructured":"[9] Michael Backes, Sven Bugiel, and Erik Derr. Reliable Third-Party Library Detection in Android and its Security Applications. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, CCS \u201916, pages 356\u2013367, New York, NY, USA, 2016. ACM.10.1145\/2976749.2978333","DOI":"10.1145\/2976749.2978333"},{"key":"2022060207221977157_j_popets-2022-0033_ref_010","doi-asserted-by":"crossref","unstructured":"[10] David Barrera, H. G\u00fcnes Kayacik, Paul C. van Oorschot, and Anil Somayaji. A Methodology for Empirical Analysis of Permission-Based Security Models and Its Application to Android. In Proceedings of the 17th ACM Conference on Computer and Communications Security, CCS \u201910, page 73\u201384, New York, NY, USA, 2010. Association for Computing Machinery.10.1145\/1866307.1866317","DOI":"10.1145\/1866307.1866317"},{"key":"2022060207221977157_j_popets-2022-0033_ref_011","doi-asserted-by":"crossref","unstructured":"[11] Birgitta Bergvall-K\u00e5reborn and Debra Howcroft. \u2018The future\u2019s bright, the future\u2019s mobile\u2019: A study of Apple and Google mobile application developers. Work, Employment and Society, 27(6):964\u2013981, 2013.","DOI":"10.1177\/0950017012474709"},{"key":"2022060207221977157_j_popets-2022-0033_ref_012","doi-asserted-by":"crossref","unstructured":"[12] Reuben Binns, Ulrik Lyngs, Max Van Kleek, Jun Zhao, Timothy Libert, and Nigel Shadbolt. Third Party Tracking in the Mobile Ecosystem. In Proceedings of the 10th ACM Conference on Web Science, WebSci \u201918, page 23\u201331, New York, NY, USA, 2018. Association for Computing Machinery.10.1145\/3201064.3201089","DOI":"10.1145\/3201064.3201089"},{"key":"2022060207221977157_j_popets-2022-0033_ref_013","doi-asserted-by":"crossref","unstructured":"[13] Reuben Binns, Jun Zhao, Max Van Kleek, and Nigel Shadbolt. Measuring third-party tracker power across web and mobile. ACM Transactions on Internet Technology, 18(4):1\u201322, 2018.10.1145\/3176246","DOI":"10.1145\/3176246"},{"key":"2022060207221977157_j_popets-2022-0033_ref_014","doi-asserted-by":"crossref","unstructured":"[14] Reuben Daniel Binns, David Millard, and Lisa Harris. Data Havens, or Privacy sans Fronti\u00e8res? A Study of International Personal Data Transfers. In Proceedings of the 2014 ACM Conference on Web Science, WebSci \u201914, page 273\u2013274, New York, NY, USA, 2014. Association for Computing Machinery.","DOI":"10.1145\/2615569.2615650"},{"key":"2022060207221977157_j_popets-2022-0033_ref_015","unstructured":"[15] Bundeskartellamt. Decision B6-22\/16 (Facebook v Bundeskartellamt). http:\/\/www.bundeskartellamt.de\/SharedDocs\/Entscheidung\/EN\/Entscheidungen\/Missbrauchsaufsicht\/2019\/B6-22-16.pdf%3F__blob%3DpublicationFile%26v%3D5."},{"key":"2022060207221977157_j_popets-2022-0033_ref_016","unstructured":"[16] Bundeskartellamt. Proceeding against Google based on new rules for large digital players. https:\/\/www.bundeskartellamt.de\/SharedDocs\/Meldung\/EN\/Pressemitteilungen\/2021\/25_05_2021_Google_19a.html, 2021."},{"key":"2022060207221977157_j_popets-2022-0033_ref_017","doi-asserted-by":"crossref","unstructured":"[17] Kai Chen, Xueqiang Wang, Yi Chen, Peng Wang, Yeonjoon Lee, XiaoFeng Wang, Bin Ma, Aohui Wang, Yingjun Zhang, and Wei Zou. Following Devil\u2019s Footprints: Cross-Platform Analysis of Potentially Harmful Libraries on Android and iOS. In 2016 IEEE Symposium on Security and Privacy (SP), pages 357\u2013376, San Jose, CA, 2016. IEEE.10.1109\/SP.2016.29","DOI":"10.1109\/SP.2016.29"},{"key":"2022060207221977157_j_popets-2022-0033_ref_018","doi-asserted-by":"crossref","unstructured":"[18] Saksham Chitkara, Nishad Gothoskar, Suhas Harish, Jason I. Hong, and Yuvraj Agarwal. Does this app really need my location?: Context-aware privacy management for smartphones. Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies, 1(3):1\u201322, 2017.","DOI":"10.1145\/3132029"},{"key":"2022060207221977157_j_popets-2022-0033_ref_019","unstructured":"[19] Chris Mallet and others. AutoHotkey. https:\/\/www.autohotkey.com\/."},{"key":"2022060207221977157_j_popets-2022-0033_ref_020","unstructured":"[20] CocoaPods. Master Repo. https:\/\/github.com\/CocoaPods\/Specs."},{"key":"2022060207221977157_j_popets-2022-0033_ref_021","unstructured":"[21] Competition and Markets Authority. Online platforms and digital advertising, 2020."},{"key":"2022060207221977157_j_popets-2022-0033_ref_022","unstructured":"[22] Counterpoint Research. US Monthly Smartphone Sell-Through Highlights Recovery, Device Spec Trends. https:\/\/www.counterpointresearch.com\/us-monthly-smartphone-sell-highlights-recovery\/, 2021."},{"key":"2022060207221977157_j_popets-2022-0033_ref_023","doi-asserted-by":"crossref","unstructured":"[23] Erik Derr, Sven Bugiel, Sascha Fahl, Yasemin Acar, and Michael Backes. Keep Me Updated: An Empirical Study of Third-Party Library Updatability on Android. In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, CCS \u201917, pages 2187\u20132200, New York, NY, USA, 2017. ACM.10.1145\/3133956.3134059","DOI":"10.1145\/3133956.3134059"},{"key":"2022060207221977157_j_popets-2022-0033_ref_024","unstructured":"[24] Manuel Egele, Christopher Kruegel, Engin Kirda, and Giovanni Vigna. PiOS: Detecting Privacy Leaks in iOS Applications. In Proceedings of NDSS 2011, 2011."},{"key":"2022060207221977157_j_popets-2022-0033_ref_025","doi-asserted-by":"crossref","unstructured":"[25] Anirudh Ekambaranathan, Jun Zhao, and Max Van Kleek. \u201cMoney makes the world go around\u201d: Identifying barriers to better privacy in children\u2019s apps from developers\u2019 perspectives. In Conference on Human Factors in Computing Systems (CHI \u201921), pages 1\u201324. ACM Press, 2021.10.1145\/3411764.3445599","DOI":"10.1145\/3411764.3445599"},{"key":"2022060207221977157_j_popets-2022-0033_ref_026","unstructured":"[26] eMarketer. Mobile moves to majority share of Google\u2019s worldwide ad revenues. https:\/\/www.emarketer.com\/Article\/Mobile-Moves-Majority-Share-of-Googles-Worldwide-Ad-Revenues\/1014633, 2016."},{"key":"2022060207221977157_j_popets-2022-0033_ref_027","unstructured":"[27] William Enck, Peter Gilbert, Byung-Gon Chun, Landon P. Cox, Jaeyeon Jung, Patrick McDaniel, and Anmol N. Sheth. TaintDroid: An Information-flow Tracking System for Real-time Privacy Monitoring on Smartphones. In Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation, OSDI\u201910, pages 393\u2013407, 2010."},{"key":"2022060207221977157_j_popets-2022-0033_ref_028","unstructured":"[28] European Commission. Antitrust: Commission opens investigations into Apple\u2019s App Store rules. https:\/\/ec.europa.eu\/commission\/presscorner\/detail\/en\/ip_20_1073, 2020."},{"key":"2022060207221977157_j_popets-2022-0033_ref_029","unstructured":"[29] European Court of Justice. Breyer v Germany. https:\/\/curia.europa.eu\/juris\/document\/document.jsf?docid=184668&doclang=EN, 2016."},{"key":"2022060207221977157_j_popets-2022-0033_ref_030","unstructured":"[30] European Parliament and Council. Regulation 2016\/679 (General Data Protection Regulation). http:\/\/data.europa.eu\/eli\/reg\/2016\/679\/oj, 2016."},{"key":"2022060207221977157_j_popets-2022-0033_ref_031","unstructured":"[31] Exodus. Statistics. https:\/\/reports.exodus-privacy.eu.org\/en\/trackers\/stats\/."},{"key":"2022060207221977157_j_popets-2022-0033_ref_032","doi-asserted-by":"crossref","unstructured":"[32] Adrienne Porter Felt, Erika Chin, Steve Hanna, Dawn Song, and David Wagner. Android Permissions Demystified. In Proceedings of the 18th ACM Conference on Computer and Communications Security - CCS \u201911, pages 627\u2013637. ACM Press, 2011.","DOI":"10.1145\/2046707.2046779"},{"key":"2022060207221977157_j_popets-2022-0033_ref_033","unstructured":"[33] Adrienne Porter Felt, Kate Greenwood, and David Wagner. The Effectiveness of Application Permissions. In Proceedings of the 2Nd USENIX Conference on Web Application Development, WebApps\u201911, 2011."},{"key":"2022060207221977157_j_popets-2022-0033_ref_034","unstructured":"[34] Financial Times. China\u2019s tech giants test way around Apple\u2019s new privacy rules. https:\/\/www.ft.com\/content\/520ccdae-202f-45f9-a516-5cbe08361c34, 2021."},{"key":"2022060207221977157_j_popets-2022-0033_ref_035","unstructured":"[35] Google. Advertising ID - Play Console Help. https:\/\/support.google.com\/googleplay\/android-developer\/answer\/6048248."},{"key":"2022060207221977157_j_popets-2022-0033_ref_036","unstructured":"[36] Google. Developer Content Policy. https:\/\/play.google.com\/about\/developer-content-policy\/."},{"key":"2022060207221977157_j_popets-2022-0033_ref_037","unstructured":"[37] Google. Device and network abuse. https:\/\/support.google.com\/googleplay\/android-developer\/answer\/9888379."},{"key":"2022060207221977157_j_popets-2022-0033_ref_038","doi-asserted-by":"crossref","unstructured":"[38] Daniel Greene and Katie Shilton. Platform privacies: Governance, collaboration, and the different meanings of \u201cprivacy\u201d in iOS and Android development. New Media & Society, 20(4):1640\u20131657, 2018.","DOI":"10.1177\/1461444817702397"},{"key":"2022060207221977157_j_popets-2022-0033_ref_039","doi-asserted-by":"crossref","unstructured":"[39] Irit Hadar, Tomer Hasson, Oshrat Ayalon, Eran Toch, Michael Birnhack, Sofia Sherman, and Arod Balissa. Privacy by designers: software developers\u2019 privacy mindset. Empirical Software Engineering, 23(1):259\u2013289, 2018.","DOI":"10.1007\/s10664-017-9517-1"},{"key":"2022060207221977157_j_popets-2022-0033_ref_040","unstructured":"[40] Catherine Han, Irwin Reyes, Amit Elazari, Joel Reardon, Alvaro Feal, Kenneth A. Bamberger, Serge Egelman, and Narseo Vallina-Rodriguez. Do You Get What You Pay For? Comparing The Privacy Behaviors of Free vs. Paid Apps. In The Workshop on Technology and Consumer Protection (ConPro \u201919), 2019."},{"key":"2022060207221977157_j_popets-2022-0033_ref_041","unstructured":"[41] Jin Han, Qiang Yan, Debin Gao, Jianying Zhou, and Robert H Deng. Comparing Mobile Privacy Protection through Cross-Platform Applications. In Proceedings 2013 Network and Distributed System Security Symposium. Internet Society, 2013."},{"key":"2022060207221977157_j_popets-2022-0033_ref_042","doi-asserted-by":"crossref","unstructured":"[42] Adrian Holzer and Jan Ondrus. Mobile application market: A developer\u2019s perspective. Telematics and Informatics, 28(1):22\u201331, 2011.","DOI":"10.1016\/j.tele.2010.05.006"},{"key":"2022060207221977157_j_popets-2022-0033_ref_043","unstructured":"[43] ICO. Age appropriate design: a code of practice for online services. https:\/\/ico.org.uk\/for-organisations\/guide-to-data-protection\/ico-codes-of-practice\/age-appropriate-design-a-code-of-practice-for-online-services\/, 2020."},{"key":"2022060207221977157_j_popets-2022-0033_ref_044","doi-asserted-by":"crossref","unstructured":"[44] Jinseong Jeon, Kristopher K. Micinski, Jeffrey A. Vaughan, Ari Fogel, Nikhilesh Reddy, Jeffrey S. Foster, and Todd Millstein. Dr. Android and Mr. Hide: Fine-Grained Permissions in Android Applications. In Proceedings of the Second ACM Workshop on Security and Privacy in Smartphones and Mobile Devices - SPSM \u201912. ACM Press, 2012.10.1145\/2381934.2381938","DOI":"10.1145\/2381934.2381938"},{"key":"2022060207221977157_j_popets-2022-0033_ref_045","unstructured":"[45] Konrad Kollnig, Reuben Binns, Pierre Dewitte, Max Van Kleek, Ge Wang, Daniel Omeiza, Helena Webb, and Nigel Shadbolt. A Fait Accompli? An Empirical Study into the Absence of Consent to Third-Party Tracking in Android Apps. Proceedings of the Seventeenth Symposium on Usable Privacy and Security, 2021."},{"key":"2022060207221977157_j_popets-2022-0033_ref_046","unstructured":"[46] Jialiu Lin, Bin Liu, Norman Sadeh, and Jason I Hong. Modeling Users\u2019 Mobile App Privacy Preferences: Restoring Usability in a Sea of Permission Settings. Proceedings of the Fifteenth Symposium on Usable Privacy and Security, 2014."},{"key":"2022060207221977157_j_popets-2022-0033_ref_047","unstructured":"[47] Bin Liu, Mads Schaarup Andersen, Florian Schaub, Hazim Almuhimedi, Shikun Zhang, Norman Sadeh, Alessandro Acquisti, and Yuvraj Agarwal. Follow My Recommendations: A Personalized Privacy Assistant for Mobile App Permissions. Proceedings of the Fifteenth Symposium on Usable Privacy and Security, 2016."},{"key":"2022060207221977157_j_popets-2022-0033_ref_048","unstructured":"[48] Ziang Ma, Haoyu Wang, Yao Guo, and Xiangqun Chen. LibRadar: Fast and Accurate Detection of Third-Party Libraries in Android Apps. In 2016 IEEE\/ACM 38th International Conference on Software Engineering Companion (ICSE-C), pages 653\u2013656, 2016."},{"key":"2022060207221977157_j_popets-2022-0033_ref_049","doi-asserted-by":"crossref","unstructured":"[49] Kelly D. Martin and Patrick E. Murphy. The role of data privacy in marketing. Journal of the Academy of Marketing Science, 45(2):135\u2013155, 2017.10.1007\/s11747-016-0495-4","DOI":"10.1007\/s11747-016-0495-4"},{"key":"2022060207221977157_j_popets-2022-0033_ref_050","unstructured":"[50] matlink. Google Play Downloader via Command line. https:\/\/github.com\/matlink\/gplaycli."},{"key":"2022060207221977157_j_popets-2022-0033_ref_051","unstructured":"[51] Abraham H Mhaidli, Yixin Zou, and Florian Schaub. \u201cWe Can\u2019t Live Without Them!\u201d App Developers\u2019 Adoption of Ad Networks and Their Considerations of Consumer Risks. Proceedings of the Fifteenth Symposium on Usable Privacy and Security, 2019."},{"key":"2022060207221977157_j_popets-2022-0033_ref_052","unstructured":"[52] Trung Tin Nguyen, Michael Backes, Ninja Marnau, and Ben Stock. Share First, Ask Later (or Never?) Studying Violations of GDPR\u2019s Explicit Consent in Android Apps. In 30th USENIX Security Symposium (USENIX Security 21), pages 3667\u20133684. USENIX Association, 2021."},{"key":"2022060207221977157_j_popets-2022-0033_ref_053","unstructured":"[53] Ehimare Okoyomon, Nikita Samarin, Primal Wijesekera, Amit Elazari, Narseo Vallina-Rodriguez, Irwin Reyes, \u00c1lvaro Feal, and Serge Egelman. On The Ridiculousness of Notice and Consent: Contradictions in App Privacy Policies. The Workshop on Technology and Consumer Protection (ConPro \u201919), 2019."},{"key":"2022060207221977157_j_popets-2022-0033_ref_054","doi-asserted-by":"crossref","unstructured":"[54] Damilola Orikogbo, Matthias B\u00fcchler, and Manuel Egele. CRiOS: Toward large-scale iOS application analysis. In Proceedings of the 6th Workshop on Security and Privacy in Smartphones and Mobile Devices, SPSM \u201916, page 33\u201342, New York, NY, USA, 2016. Association for Computing Machinery.10.1145\/2994459.2994473","DOI":"10.1145\/2994459.2994473"},{"key":"2022060207221977157_j_popets-2022-0033_ref_055","unstructured":"[55] Privacy International. How Apps on Android Share Data with Facebook. https:\/\/privacyinternational.org\/campaigns\/investigating-apps-interactions-facebook-android, 2018."},{"key":"2022060207221977157_j_popets-2022-0033_ref_056","doi-asserted-by":"crossref","unstructured":"[56] Abbas Razaghpanah, Rishab Nithyanand, Narseo Vallina-Rodriguez, Srikanth Sundaresan, Mark Allman, Christian Kreibich, and Phillipa Gill. Apps, trackers, privacy, and regulators: A global study of the mobile tracking ecosystem. In Proceedings of NDSS 2018, 2018.10.14722\/ndss.2018.23353","DOI":"10.14722\/ndss.2018.23353"},{"key":"2022060207221977157_j_popets-2022-0033_ref_057","unstructured":"[57] Joel Reardon, \u00c1lvaro Feal, Primal Wijesekera, Amit Elazari Bar On, Narseo Vallina-Rodriguez, and Serge Egelman. 50 Ways to Leak Your Data: An Exploration of Apps\u2019 Circumvention of the Android Permissions System. In 28th USENIX Security Symposium (USENIX Security 19), pages 603\u2013620, Santa Clara, CA, 2019. USENIX Association."},{"key":"2022060207221977157_j_popets-2022-0033_ref_058","doi-asserted-by":"crossref","unstructured":"[58] Joel R. Reidenberg, Jaspreet Bhatia, Travis D. Breaux, and Thomas B. Norton. Ambiguity in Privacy Policies and the Impact of Regulation. The Journal of Legal Studies, 45(S2):S163\u2013S190, 2016.10.1086\/688669","DOI":"10.1086\/688669"},{"key":"2022060207221977157_j_popets-2022-0033_ref_059","unstructured":"[59] Jingjing Ren, Ashwin Rao, Martina Lindorfer, Arnaud Legout, and David Choffnes. ReCon: Revealing and Controlling PII Leaks in Mobile Network Traffic. In Proceedings of the 14th Annual International Conference on Mobile Systems, Applications, and Services - MobiSys \u201916, pages 361\u2013374, Singapore, Singapore, 2016. ACM Press."},{"key":"2022060207221977157_j_popets-2022-0033_ref_060","doi-asserted-by":"crossref","unstructured":"[60] Irwin Reyes, Primal Wijesekera, Joel Reardon, Amit Elazari Bar On, Abbas Razaghpanah, Narseo Vallina-Rodriguez, and Serge Egelman. \u201cWon\u2019t Somebody Think of the Children?\u201d Examining COPPA Compliance at Scale. Proceedings on Privacy Enhancing Technologies, 2018(3):63\u201383, 2018.10.1515\/popets-2018-0021","DOI":"10.1515\/popets-2018-0021"},{"key":"2022060207221977157_j_popets-2022-0033_ref_061","unstructured":"[61] Anastasia Shuba, Anh Le, Emmanouil Alimpertis, Minas Gjoka, and Athina Markopoulou. AntMonitor: A System for On-Device Mobile Network Monitoring and its Applications. arXiv preprint arXiv:1611.04268, 2016."},{"key":"2022060207221977157_j_popets-2022-0033_ref_062","doi-asserted-by":"crossref","unstructured":"[62] Anastasia Shuba and Athina Markopoulou. NoMoATS: Towards Automatic Detection of Mobile Tracking. Proceedings on Privacy Enhancing Technologies, 2020(2):45\u201366, 2020.","DOI":"10.2478\/popets-2020-0017"},{"key":"2022060207221977157_j_popets-2022-0033_ref_063","doi-asserted-by":"crossref","unstructured":"[63] Anastasia Shuba, Athina Markopoulou, and Zubair Shafiq. NoMoAds: Effective and Efficient Cross-App Mobile Ad-Blocking. In Proceedings on Privacy Enhancing Technologies 2018, pages 125\u2013140, 2018.10.1515\/popets-2018-0035","DOI":"10.1515\/popets-2018-0035"},{"key":"2022060207221977157_j_popets-2022-0033_ref_064","unstructured":"[64] Nakatani Shuyo and Michal Danil\u00e1k. langdetect. https:\/\/pypi.org\/project\/langdetect\/."},{"key":"2022060207221977157_j_popets-2022-0033_ref_065","unstructured":"[65] SOCIAM. xray-archiver. https:\/\/github.com\/sociam\/xray-archiver, 2018."},{"key":"2022060207221977157_j_popets-2022-0033_ref_066","doi-asserted-by":"crossref","unstructured":"[66] Yihang Song and Urs Hengartner. PrivacyGuard: A VPN-based Platform to Detect Information Leakage on Android Devices. In Proceedings of the 5th Annual ACM CCS Workshop on Security and Privacy in Smartphones and Mobile Devices, SPSM \u201915, pages 15\u201326, 2015.10.1145\/2808117.2808120","DOI":"10.1145\/2808117.2808120"},{"key":"2022060207221977157_j_popets-2022-0033_ref_067","unstructured":"[67] StatCounter. Mobile & Tablet Android Version Market Share United Kingdom. https:\/\/gs.statcounter.com\/android-version-market-share\/mobile-tablet\/united-kingdom\/#monthly-201912-202003, 2020."},{"key":"2022060207221977157_j_popets-2022-0033_ref_068","unstructured":"[68] StatCounter. Mobile Operating System Market Share in United States Of America - February 2021. https:\/\/gs.statcounter.com\/os-market-share\/mobile\/united-states-of-america, 2021."},{"key":"2022060207221977157_j_popets-2022-0033_ref_069","unstructured":"[69] Zhushou Tang, Ke Tang, Minhui Xue, Yuan Tian, Sen Chen, Muhammad Ikram, Tielei Wang, and Haojin Zhu. iOS, Your OS, Everybody\u2019s OS: Vetting and Analyzing Network Services of iOS Applications. In 29th USENIX Security Symposium (USENIX Security 20), pages 2415\u20132432. USENIX Association, 2020."},{"key":"2022060207221977157_j_popets-2022-0033_ref_070","unstructured":"[70] United States Congress. Children\u2019s Online Privacy Protection Rule. https:\/\/www.ecfr.gov\/current\/title-16\/part-312, 1998."},{"key":"2022060207221977157_j_popets-2022-0033_ref_071","unstructured":"[71] US Department of Justice. Complaint, United States v. Google LLC, No. 1:20-cv-03010. https:\/\/www.justice.gov\/opa\/press-release\/file\/1328941\/download, 2020."},{"key":"2022060207221977157_j_popets-2022-0033_ref_072","unstructured":"[72] US House of Representatives Judiciary Subcommittee on Antitrust. Investigation of Competition in Digital Markets. https:\/\/judiciary.house.gov\/uploadedfiles\/competition_in_digital_markets.pdf?utm_campaign=4493-519, 2020."},{"key":"2022060207221977157_j_popets-2022-0033_ref_073","doi-asserted-by":"crossref","unstructured":"[73] Joris van Hoboken and R \u00d3 Fathaigh. Smartphone platforms as privacy regulators. Computer Law & Security Review, 41, 2021.10.1016\/j.clsr.2021.105557","DOI":"10.1016\/j.clsr.2021.105557"},{"key":"2022060207221977157_j_popets-2022-0033_ref_074","doi-asserted-by":"crossref","unstructured":"[74] Max Van Kleek, Reuben Binns, Jun Zhao, Adam Slack, Sauyon Lee, Dean Ottewell, and Nigel Shadbolt. X-Ray Refine: Supporting the Exploration and Refinement of Information Exposure Resulting from Smartphone Apps. In Proceedings of the 2018 CHI Conference on Human Factors in Computing Systems - CHI \u201918, pages 1\u201313. ACM Press, 2018.10.1145\/3173574.3173967","DOI":"10.1145\/3173574.3173967"},{"key":"2022060207221977157_j_popets-2022-0033_ref_075","doi-asserted-by":"crossref","unstructured":"[75] Max Van Kleek, Ilaria Liccardi, Reuben Binns, Jun Zhao, Daniel J. Weitzner, and Nigel Shadbolt. Better the Devil You Know: Exposing the Data Sharing Practices of Smartphone Apps. In Proceedings of the 2017 CHI Conference on Human Factors in Computing Systems - CHI \u201917, pages 5208\u20135220. ACM Press, 2017.10.1145\/3025453.3025556","DOI":"10.1145\/3025453.3025556"},{"key":"2022060207221977157_j_popets-2022-0033_ref_076","doi-asserted-by":"crossref","unstructured":"[76] Nicolas Viennot, Edward Garcia, and Jason Nieh. A measurement study of Google Play. In The 2014 ACM International Conference on Measurement and Modeling of Computer Systems, SIGMETRICS \u201914, pages 221\u2013233, 2014.10.1145\/2591971.2592003","DOI":"10.1145\/2591971.2592003"},{"key":"2022060207221977157_j_popets-2022-0033_ref_077","doi-asserted-by":"crossref","unstructured":"[77] Paul Vines, Franziska Roesner, and Tadayoshi Kohno. Exploring ADINT: Using Ad Targeting for Surveillance on a Budget - or - How Alice Can Buy Ads to Track Bob. In Proceedings of the 2017 on Workshop on Privacy in the Electronic Society - WPES \u201917, pages 153\u2013164, Dallas, Texas, USA, 2017. ACM Press.10.1145\/3139550.3139567","DOI":"10.1145\/3139550.3139567"},{"key":"2022060207221977157_j_popets-2022-0033_ref_078","doi-asserted-by":"crossref","unstructured":"[78] Haoyu Wang, Zhe Liu, Jingyue Liang, Narseo Vallina-Rodriguez, Yao Guo, Li Li, Juan Tapiador, Jingcun Cao, and Guoai Xu. Beyond Google Play: A Large-Scale Comparative Study of Chinese Android App Markets. In Proceedings of the Internet Measurement Conference 2018, IMC \u201918, pages 293\u2013307, 2018.10.1145\/3278532.3278558","DOI":"10.1145\/3278532.3278558"},{"key":"2022060207221977157_j_popets-2022-0033_ref_079","doi-asserted-by":"crossref","unstructured":"[79] Primal Wijesekera, Arjun Baokar, Lynn Tsai, Joel Reardon, Serge Egelman, David Wagner, and Konstantin Beznosov. The Feasibility of Dynamically Granted Permissions: Aligning Mobile Privacy with User Preferences. In 2017 IEEE Symposium on Security and Privacy (SP), pages 1077\u20131093. IEEE, 2017.10.1109\/SP.2017.51","DOI":"10.1109\/SP.2017.51"},{"key":"2022060207221977157_j_popets-2022-0033_ref_080","doi-asserted-by":"crossref","unstructured":"[80] Sebastian Zimmeck, Peter Story, Daniel Smullen, Abhilasha Ravichander, Ziqi Wang, Joel Reidenberg, N Cameron Russell, and Norman Sadeh. MAPS: Scaling privacy compliance analysis to a million apps. Privacy Enhancing Technologies Symposium 2019, 72, 2019.10.2478\/popets-2019-0037","DOI":"10.2478\/popets-2019-0037"},{"key":"2022060207221977157_j_popets-2022-0033_ref_081","doi-asserted-by":"crossref","unstructured":"[81] Sebastian Zimmeck, Ziqi Wang, Lieyong Zou, Roger Iyengar, Bin Liu, Florian Schaub, Shomir Wilson, Norman Sadeh, Steven M. Bellovin, and Joel Reidenberg. Automated analysis of privacy requirements for mobile apps. In NDSS Symposium 2017, 2017.10.14722\/ndss.2017.23034","DOI":"10.14722\/ndss.2017.23034"}],"container-title":["Proceedings on Privacy Enhancing Technologies"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.sciendo.com\/pdf\/10.2478\/popets-2022-0033","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,19]],"date-time":"2024-09-19T20:22:18Z","timestamp":1726777338000},"score":1,"resource":{"primary":{"URL":"https:\/\/petsymposium.org\/popets\/2022\/popets-2022-0033.php"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,3,3]]},"references-count":81,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2022,3,3]]},"published-print":{"date-parts":[[2022,4,1]]}},"alternative-id":["10.2478\/popets-2022-0033"],"URL":"https:\/\/doi.org\/10.2478\/popets-2022-0033","relation":{},"ISSN":["2299-0984"],"issn-type":[{"value":"2299-0984","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,3,3]]}}}