Putting mobile application privacy in context: An empirical study of user privacy expectations for mobile devices

Information Society

Volumn 32, Issue 3, 2016, Pages 200-216

  Martin, Kirsten ^a   Shilton, Katie ^b  

^a GEORGE WASHINGTON UNIVERSITY   (United States)

^b UNIVERSITY OF MARYLAND   (United States)

Author keywords

Applications; contextual integrity; Internet; mobile; privacy; social contract

Indexed keywords

EID: 84963542365     PISSN: 01972243     EISSN: 10876537     Source Type: Journal    
DOI: 10.1080/01972243.2016.1153012     Document Type: Article

References (59)

1. ACT. 2012. Apps across America: The economics and ecosystem of the mobile app market. Washington, DC: ACT.
2. Android Apps on Google Play. 2013. https://play.google.com/store/apps?feature=corpus_selector (accessed July 14, 2013).
3. App Store Downloads on iTunes. 2013. https://itunes.apple.com/us/genre/ios/id36?mt=8 (accessed July 14, 2013).
4. J.H.Beales,, and T.J.Muris. 2008. Choice or consequences: Protecting privacy in commercial information. University of Chicago Law Review 75 (1):109–135.
5. T.S.Behrend,, D.J.Sharek, A.W.Meade, and E.N.Wiebe. 2011. The viability of crowdsourcing for survey research. Behavior Research Methods 43 (3):800–813. http://dx.doi.org/10.3758/s13428-011-0081-0.
6. A.J.Berinsky,, G.A.Huber, and G.S.Lenz. 2012. Evaluating Online labor markets for experimental research: Amazon.com's Mechanical Turk. Political Analysis 20 (3):351–368. http://dx.doi.org/10.1093/pan/mpr057.
7. N.E.Bowie,, and K.Jamal. 2006. Privacy rights on the Internet: Self-regulation or government regulation? Business Ethics Quarterly 16 (3):323–342.
8. J.L.Boyles,, A.Smith, and M.Madden. 2012. Privacy and data management on mobile devices. Washington, DC: Pew Internet & American Life Project. http://www.pewinternet.org/Reports/2012/Mobile-Privacy.aspx (accessed October 8, 2012).
9. A.Braunstein,, L.Granka, and J.Staddon. 2011. Indirect content privacy surveys: Measuring privacy without asking about it. In SOUPS 2011 Proceedings of the Seventh Symposium on Usable Privacy and Security 15:1–15:14. New York, NY: ACM.
10. T.Buchanan,, C.Paine, A.N.Joinson, and U.-D.Reips. 2007. Development of measures of online privacy concern and protection for use on the Internet. Journal of the American Society for Information Science and Technology 58 (2):157–165.
11. J.C.Buitelaar, 2014. Privacy and narrativity in the Internet era. The Information Society 30 (4):266–281.
12. F.H.Cate, 2010. The limits of notice and choice. IEEE Security Privacy 8 (2):59–62. http://dx.doi.org/10.1109/MSP.2010.84.
13. A.Cavoukian, 2012. Operationalizing privacy by design: A guide to implementing strong privacy practices. Toronto, ON, Canada: Office of the Privacy Commissioner, Ontario, Canada. http://www.privacybydesign.ca/index.php/paper/operationalizing-privacy-by-design-a-guide-to-implementing-strong-privacy-practices (accessed July 17, 2013).
14. L.Columbus, 2013. Roundup of mobile apps & App Store forecasts, 2013. Forbes, June 9, sec. tech. http://www.forbes.com/sites/louiscolumbus/2013/06/09/roundup-of-mobile-apps-app-store-forecasts-2013 (accessed July 14, 2013).
15. M.J.Culnan, 1995. Consumer awareness of name removal procedures: Implications for direct marketing. Journal of Direct Marketing 9 (2):10–19.
16. M.J.Culnan,, and R.J.Bies. 2003. Consumer privacy: Balancing economic and justice considerations. Journal of Social Issues 59 (2):323–342. http://dx.doi.org/10.1111/1540-4560.00067.
17. M.J.Culnan,, and C.C.Williams. 2009. How ethics can enhance organizational privacy: Lessons from the ChoicePoint and TJX data breaches. Management Information Systems Quarterly 33 (4):673–687.
18. M.R.Curry,, D.J.Phillips, and P.M.Regan. 2004. Emergency response systems and the creeping legibility of people and places. The Information Society 20 (5):357–69.
19. T.W.Dunfee,, N.C.Smith, and W.T.Ross,Jr. 1999. Social contracts and marketing ethics. Journal of Marketing 63 (3):14–32.
20. M.A.Eastlick,, S.L.Lotz, and P.Warrington. 2006. Understanding online B-to-C relationships: An integrated model of privacy concerns, trust, and commitment. Journal of Business Research 59 (8):877–886.
21. Federal Trade Commission. 2010. Protecting consumer privacy in an era of rapid change. Washington, DC: Federal Trade Commission. http://www.ftc.gov/sites/default/files/documents/reports/federal-trade-commission-bureau-consumer-protection-preliminary-ftc-staff-report-protecting-consumer/101201privacyreport.pdf (accessed May 18, 2012).
22. Federal Trade Commission. 2012. Protecting consumer privacy in an era of rapid change: Recommendations for businesses and policymakers. Washington, DC: Federal Trade Commission.
23. R.Gross,, and A.Acquisti. 2005. Information revelation and privacy in online social networks. In WPES '05 Proceedings of the 2005 ACM Workshop on Privacy in the Electronic Society, 71–80. New York, NY: ACM.
24. C.Heeney, 2012. Breaching the contract? Privacy and the UK Census. The Information Society 28 (5):316–328.
25. D.L.Hoffman,, T.P.Novak, and M.A.Peralta. 1999. Information privacy in the marketspace: Implications for the commercial uses of anonymity on the Web. The Information Society 15 (2):129–39.
26. K.-L.Hui,, H.H.Teo, and S.-Y.Tom Lee. 2007. The value of privacy assurance: An exploratory field experiment. MIS Quarterly 31 (1):19–33.
27. G.Jasso, 2006. Factorial survey methods for studying beliefs and judgments. Sociological Methods & Research 34 (3):334–423.
28. D.G.Johnson, 2004. Is the global information infrastructure a democratic technology? In Readings in cyberethics, ed. R.A.Spinello and H.T.Tavani, 2nd ed., 121–133. Sudbury, MA: Jones and Bartlett.
29. C.Kang, 2013. Flashlight app kept users in the dark about sharing location data: FTC. The Washington Post, December 6, sec. Tech. http://www.washingtonpost.com/business/technology/flashlight-app-kept-users-in-the-dark-about-sharing-location-data-ftc/2013/12/05/1be26fa6-5dc7-11e3-be07-006c776266ed_story.html (accessed May 14, 2014).
30. I.Kroener,, and D.Wright. 2014. A strategy for operationalizing privacy by design. The Information Society 30 (5):355–65.
31. M.Lease,, J.Hullman, J.Bigham, M.Bernstein, J.Kim, W.Lasecki, S.Bakhshi, T.Mitra, and R.Miller. 2013. Mechanical Turk is not anonymous (SSRN Scholarly Paper ID 2228728). Rochester, NY: Social Science Research Network. http://papers.ssrn.com/abstract=2228728 (accessed March 8 2013).
32. H.Li,, R.Sarathy, and H.Xu. 2010. Understanding situational online information disclosure as a privacy calculus. Journal of Computer Information Systems 51 (1):62–71.
33. J.Lin,, S.Amini, J.I.Hong, N.Sadeh, J.Lindqvist, and J.Zhang. 2012. Expectation and purpose: Understanding users’ mental models of mobile app privacy through crowdsourcing. In UbiComp ’12 Proceedings of the 2012 ACM Conference on Ubiquitous Computing, 501–510. New York, NY: ACM. http://dx.doi.org/10.1145/2370216.2370290.
34. K.Martin, 2013. Transaction costs, privacy, and trust: The laudable goals and ultimate failure of notice and choice to respect privacy online. First Monday 18 (12):online.
35. K.Martin, 2015. Understanding privacy online: Development of a social contract approach to privacy. Journal of Business Ethics: 1–19. https://link.springer.com/article/10.1007/s10551-015-2565-9.
36. K.E.Martin, 2012. Diminished or just different? A factorial vignette study of privacy as a social contract. Journal of Business Ethics 111 (4):519–539. http://dx.doi.org/10.1007/s10551-012-1215-8.
37. J.Mayer,, and A.Narayanan. 2013. Privacy substitutes. Stanford Law Review Online 66:89–96.
38. P.McCole,, E.Ramsey, and J.Williams. 2010. Trust considerations on attitudes towards online purchasing: The moderating effect of privacy and security concerns. Journal of Business Research 63 (9):1018–1024.
39. A.M.McDonald,, and L.F.Cranor. 2008. The cost of reading privacy policies. I/S: A Journal of Law and Policy for the Information Society 4:540–565.
40. G.R.Milne,, and M.J.Culnan. 2002. Using the content of online privacy notices to inform public policy: A longitudinal analysis of the 1998-2001 US Web surveys. The Information Society 18 (5):345–59.
41. G.R.Milne,, M.J.Culnan, and H.Greene. 2006. A longitudinal assessment of online privacy notice readability. Journal of Public Policy & Marketing 25 (2):238–49.
42. G.R.Milne,, and M.E.Gordon. 1993. Direct mail privacy-efficiency trade-offs within an implied social contract framework. Journal of Public Policy & Marketing 12 (2):206–15.
43. H.Nissenbaum, 2004. Privacy as contextual integrity. Washington Law Review 79 (1):119–58.
44. H.Nissenbaum, 2009. Privacy in context: Technology, policy, and the integrity of social life. Stanford, CA: Stanford Law Books.
45. H.Nissenbaum, 2011. A contextual approach to privacy online. Daedalus 140 (4):32–48.
46. S.Nock,, and T.Guterbock. 2010. Survey experiments. In Handbook of survey research, eds. P.V.Marsden and J.D.Wright, 837–864. Bingley, UK: Emerald Group Publishing.
47. P.A.Pavlou,, and D.Gefen. 2004. Building effective online marketplaces with institution-based trust. Information Systems Research 15 (1):37–59.
48. J.Phelps,, G.Nowak, and E.Ferrell. 2000. Privacy concerns and consumer willingness to provide personal information. Journal of Public Policy & Marketing 19 (1):27–41.
49. M.Popescu,, and L.Baruh. 2013. Captive but mobile: Privacy concerns and remedies for the mobile environment. The Information Society 29 (5):272–86.
50. J.Ross,, L.Irani, M.S.Silberman, A.Zaldivar, and B.Tomlinson. 2010. Who are the crowdworkers?: Shifting demographics in Mechanical Turk. In CHI EA ’10: CHI ’10 extended abstracts on human factors in computing systems, 2863–2872. New York, NY: ACM. http://dx.doi.org/10.1145/1753846.1753873.
51. P.H.Rossi,, and S.L.Nock. 1982. Measuring social judgments: The factorial survey approach. Beverly Hills, CA: Sage.
52. K.B.Sheehan, 2002. Toward a typology of internet users and online privacy concerns. The Information Society 18 (1):21–32.
53. K.Shilton, 2009. Four billion little brothers?: Privacy, mobile phones, and ubiquitous data collection. Communications of the ACM 52 (11):48–53.
54. D.J.Solove, 2006. A taxonomy of privacy. University of Pennsylvania Law Review 154 (3):477–564.
55. S.Spiekermann,, and L.F.Cranor. 2009. Engineering privacy. IEEE Transactions on Software Engineering 35 (1):67–82.
56. J.Waldo,, H.S.Lin, and L.I.Millett. 2007. Engaging privacy and information technology in a digital age. Washington, DC: The National Academies Press.
57. L.Wallander, 2009. 25 Years of factorial surveys in sociology: A review. Social Science Research 38 (3):505–20.
58. H.Xu,, H.-H.Teo, B.C.Y.Tan, and R.Agarwal. 2012. Research noteࣧEffects of individual self-protection, industry self-regulation, and government regulation on privacy concerns: a study of location-based services. Information Systems Research 23 (4):1342–1363. http://dx.doi.org/10.1287/isre.1120.0416.
59. H.Xu,, C.Zhang, P.Shi, and P.Song. 2009. Exploring the role of overt vs. covert personalization strategy in privacy calculus. Academy of Management Proceedings 2009 (1):1–6. http://dx.doi.org/10.5465/AMBPP.2009.44249857.