{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,9]],"date-time":"2026-10-09T07:54:13Z","timestamp":1791532453037,"version":"4.3.4"},"reference-count":0,"publisher":"Privacy Enhancing Technologies Symposium Advisory Board","issue":"3","license":[{"start":{"date-parts":[[2022,7,1]],"date-time":"2022-07-01T00:00:00Z","timestamp":1656633600000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/3.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["PoPETs"],"abstract":"<jats:p>Mobile child care management applications can help child care facilities, preschools, and kindergartens to save time and money by allowing their employees to speed up everyday child care tasks using mobile devices. Such apps often allow child care workers to communicate with parents or guardians, sharing their children\u2019s most private data (e. g., activities, photos, location, developmental aspects, and sometimes even medical information). To offer these services, child care apps require access to very sensitive data of minors that should never be shared over insecure channels and are subject to restrictive privacy laws. This work analyzes the privacy and security of 42 Android child care applications and their cloud-backends using a combination of static and dynamic analysis frameworks, configuration scanners, and inspecting their privacy policies. The results of our analysis show that while children do not use these apps, they can leak sensitive data about them. Alarming are the findings that many third-party (tracking) services are embedded in the applications and that adversaries can access personal data by abusing vulnerabilities in the applications. We hope our work will raise awareness about the privacy risks introduced by these applications and that regulatory authorities will focus more on these risks in the future.<\/jats:p>","DOI":"10.56553\/popets-2022-0078","type":"journal-article","created":{"date-parts":[[2022,7,20]],"date-time":"2022-07-20T15:49:20Z","timestamp":1658332160000},"page":"394-414","source":"Crossref","is-referenced-by-count":19,"title":["\u201cWe may share the number of diaper changes\u201d: A Privacy and Security Analysis of Mobile Child Care Applications"],"prefix":"10.56553","volume":"2022","author":[{"given":"Moritz","family":"Gruber","sequence":"first","affiliation":[{"name":"AWARE7 GmbH"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christian","family":"H\u00f6fig","sequence":"additional","affiliation":[{"name":"AWARE7 GmbH"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Maximilian","family":"Golla","sequence":"additional","affiliation":[{"name":"Max Planck Institute for Security and Privacy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tobias","family":"Urban","sequence":"additional","affiliation":[{"name":"Institute for Internet Security \u2013 if(is); secunet Security Networks AG"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Matteo","family":"Gro\u00dfe-Kampmann","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum; AWARE7 GmbH; Institute for Internet Security \u2013 if(is)"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"35752","published-online":{"date-parts":[[2022,7]]},"container-title":["Proceedings on Privacy Enhancing Technologies"],"original-title":[],"deposited":{"date-parts":[[2022,8,31]],"date-time":"2022-08-31T17:28:55Z","timestamp":1661966935000},"score":1,"resource":{"primary":{"URL":"https:\/\/petsymposium.org\/popets\/2022\/popets-2022-0078.php"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,7]]},"references-count":0,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2022,7]]}},"alternative-id":["10.56553\/popets-2022-0078"],"URL":"https:\/\/doi.org\/10.56553\/popets-2022-0078","relation":{},"ISSN":["2299-0984"],"issn-type":[{"value":"2299-0984","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,7]]}}}