Listen to the Voices of Everyday Users: Democratizing Privacy Ratings for Sensitive Data Access in Mobile Apps

• URL: http://arxiv.org/abs/2604.24066v1
• Date: Mon, 27 Apr 2026 05:47:58 GMT
• Title: Listen to the Voices of Everyday Users: Democratizing Privacy Ratings for Sensitive Data Access in Mobile Apps
• Abstract summary: Mobile apps frequently request excessive data access, raising significant privacy concerns.<n>Existing regulatory mechanisms rely on expert-driven audits that face challenges in scalability, neutrality, and alignment with user expectations.<n>We propose a novel paradigm--democratizing privacy assessment, inspired by prior work on user-centric privacy perceptions.
• Score: 8.301057281097679
• License: http://creativecommons.org/licenses/by-nc-sa/4.0/
• Abstract: Mobile apps frequently request excessive data access, raising significant privacy concerns. While regulations like GDPR emphasize data minimization, they provide limited guidance on concretely defining and enforcing necessary data access. Existing regulatory mechanisms primarily rely on expert-driven audits that face challenges in scalability, neutrality, and alignment with user expectations. In this paper, we propose a novel paradigm--democratizing privacy assessment, inspired by prior work on user-centric privacy perceptions--which repositions users as active evaluators in the privacy auditing process, recognizing that user perceptions of data usage play a crucial role in assessing the appropriateness and necessity of data access. To operationalize this paradigm, we introduce DePRa, a prototype system developed through participatory design, featuring contextual explanation provision, category-based representative selection, an intuitive rating interface, and preference-based rating adjustment. We evaluated DePRa with 200 everyday mobile app users, analyzing how effectively it captures user opinions on sensitive data access, comparing their privacy ratings with expert assessments, and exploring risk preference-based score calibration. Our findings show the feasibility and promise of democratized privacy assessment, highlighting its potential to complement expert auditing and support inclusive privacy evaluation.

Related papers

• Preference-Aware Rubric Learning for Personalized Evaluation [59.539429430690156]
  Existing evaluation methods fail to capture user-specific preferences embedded in long-term interaction histories.<n>We propose Personalized Evaluation as Learning, a paradigm that formulates personalized evaluation as a learning problem rather than a static judgment.<n>Experiments show that PARL consistently induces high-fidelity rubrics that reliably identify user-aligned responses and generalize across users.
  arXiv  Detail & Related papers  (2026-05-29T17:00:55Z)
• Challenges in Enabling Private Data Valuation [17.450381366291754]
  Data valuation methods quantify how individual training examples contribute to a model's behavior.<n> valuation scores can reveal whether a person's data was included in training, whether it was unusually influential, or what sensitive patterns exist in proprietary datasets.<n>Privacy is fundamentally in tension with valuation utility under differential privacy (DP)
  arXiv  Detail & Related papers  (2026-02-27T22:21:14Z)
• When Feasibility of Fairness Audits Relies on Willingness to Share Data: Examining User Acceptance of Multi-Party Computation Protocols for Fairness Monitoring [17.850838951015]
  We conducted an online survey with 833 participants in Europe, examining user acceptance of various MPC protocol designs for fairness monitoring.<n>Findings suggest that users prioritized risk-related attributes in direct evaluation but benefit-related attributes in simulated choices.<n>We derive implications for deploying and communicating privacy-preserving protocols in ways that foster informed consent and align with user expectations.
  arXiv  Detail & Related papers  (2026-02-02T09:17:34Z)
• A Big Step Forward? A User-Centric Examination of iOS App Privacy Report and Enhancements [11.535543802697836]
  Apple introduced a new feature since iOS 15.2, App Privacy Report, to inform users about detailed insights into apps' data access and sharing.<n>This feature has been marketed as a big step forward in user privacy, but its real-world impacts on user privacy and control remain unexamined.<n>This work provides practical insights that could help enhance user privacy transparency.
  arXiv  Detail & Related papers  (2025-11-01T09:29:04Z)
• RecPS: Privacy Risk Scoring for Recommender Systems [14.700807572189412]
  We propose a membership-inference attack (MIA)-based privacy scoring method, RecPS, to measure privacy risks at both the interaction and user levels.<n>A critical component is the interaction-level MIA method RecLiRA, which gives high-quality membership estimation.
  arXiv  Detail & Related papers  (2025-07-24T12:46:30Z)
• Collection, usage and privacy of mobility data in the enterprise and public administrations [55.2480439325792]
  Security measures such as anonymization are needed to protect individuals' privacy. Within our study, we conducted expert interviews to gain insights into practices in the field. We survey privacy-enhancing methods in use, which generally do not comply with state-of-the-art standards of differential privacy.
  arXiv  Detail & Related papers  (2024-07-04T08:29:27Z)
• Mind the Privacy Unit! User-Level Differential Privacy for Language Model Fine-Tuning [62.224804688233]
  differential privacy (DP) offers a promising solution by ensuring models are 'almost indistinguishable' with or without any particular privacy unit. We study user-level DP motivated by applications where it necessary to ensure uniform privacy protection across users.
  arXiv  Detail & Related papers  (2024-06-20T13:54:32Z)
• Rethinking the Evaluation of Dialogue Systems: Effects of User Feedback on Crowdworkers and LLMs [57.16442740983528]
  In ad-hoc retrieval, evaluation relies heavily on user actions, including implicit feedback. The role of user feedback in annotators' assessment of turns in a conversational perception has been little studied. We focus on how the evaluation of task-oriented dialogue systems ( TDSs) is affected by considering user feedback, explicit or implicit, as provided through the follow-up utterance of a turn being evaluated.
  arXiv  Detail & Related papers  (2024-04-19T16:45:50Z)
• User Consented Federated Recommender System Against Personalized Attribute Inference Attack [55.24441467292359]
  We propose a user-consented federated recommendation system (UC-FedRec) to flexibly satisfy the different privacy needs of users. UC-FedRec allows users to self-define their privacy preferences to meet various demands and makes recommendations with user consent.
  arXiv  Detail & Related papers  (2023-12-23T09:44:57Z)
• A Randomized Approach for Tight Privacy Accounting [63.67296945525791]
  We propose a new differential privacy paradigm called estimate-verify-release (EVR) EVR paradigm first estimates the privacy parameter of a mechanism, then verifies whether it meets this guarantee, and finally releases the query output. Our empirical evaluation shows the newly proposed EVR paradigm improves the utility-privacy tradeoff for privacy-preserving machine learning.
  arXiv  Detail & Related papers  (2023-04-17T00:38:01Z)
• Leveraging Privacy Profiles to Empower Users in the Digital Society [7.350403786094707]
  Privacy and ethics of citizens are at the core of the concerns raised by our increasingly digital society. We focus on the privacy dimension and contribute a step in the above direction through an empirical study on an existing dataset collected from the fitness domain. The results reveal that a compact set of semantic-driven questions helps distinguish users better than a complex domain-dependent one.
  arXiv  Detail & Related papers  (2022-04-01T15:31:50Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.