Exploring Privacy Leakage and Data Disclosure Violations in the MacOS Application Ecosystem

• URL: http://arxiv.org/abs/2608.05474v1
• Date: Wed, 05 Aug 2026 23:46:39 GMT
• Title: Exploring Privacy Leakage and Data Disclosure Violations in the MacOS Application Ecosystem
• Abstract summary: We study the mechanisms designed to regulate and disclose data collection and sharing practices in the ecosystem.<n>We find that desktop apps are being leveraged by online trackers to enrich user profiles and device fingerprints.<n>We propose a series of mitigations that aim to both streamline the data disclosure process for developers and improve Apple's app vetting process.
• Score: 10.513610661903577
• License: http://creativecommons.org/licenses/by-nc-sa/4.0/
• Abstract: The systematic and excessive data collection practices of tech companies have rendered online privacy both a necessity and a sought-after commodity. However, while the privacy risks of the web, mobile, and IoT ecosystems have been extensively examined, desktop environments have been largely overlooked. As desktop apps continue to be widely used, they remain a critical yet understudied dimension of user privacy. In this paper, we address this gap by presenting the first, to our knowledge, comprehensive study of the mechanisms designed to regulate and disclose data collection and sharing practices in the macOS ecosystem. We adopt an app-development-centric view, and shed light on the interactions between the various macOS mechanisms that mediate apps' data access. Driven by our findings, we develop NutriScan, an analysis framework that incorporates both static and dynamic analysis techniques to create a consolidated view of macOS apps' data practices and disclosures. We use our system to dynamically analyze 1K macOS apps, and find that 85% of them access user-data APIs without disclosing it. 49.7% also exfiltrate data to advertising entities and hosting providers, 12.5% of which do so without a corresponding disclosure. We find that desktop apps are being leveraged by online trackers to enrich user profiles and device fingerprints, thus shedding new light on the true scope of the online tracking ecosystem. Our analysis reveals how the macOS app ecosystem is comprised of disjoint mechanisms with divergent data abstractions, thus increasing complexity for developers while also facilitating undisclosed privacy-invasive practices. Accordingly, we propose a series of mitigations that aim to both streamline the data disclosure process for developers and improve Apple's app vetting process.

Related papers

• Disclosure Divergence: Measuring Privacy Policy and Data Safety Misalignment at Scale [0.0]
  We measure per-app and per-category consistency and introduce a sensitivity-weighted risk score that emphasizes high-risk data types.<n>We find that misalignment disproportionately affects sensitive categories such as personal information and device identifiers, with sharing disclosures exhibiting lower consistency than collection disclosures.<n>Our findings highlight structural gaps in current disclosure mechanisms and underscore the need for stronger verification and greater transparency in platform-level privacy reporting.
  arXiv  Detail & Related papers  (2026-07-16T00:34:01Z)
• Expecting (Targeted Ads)? Network Analysis of User Health Data Leakage in Fertility Tracking Apps [9.426024604008406]
  We conduct a network-based measurement study of a corpus of 20 Android fertility tracking apps from the Google Play Store.<n>We identify explicit leakage of user health data as well implicit leakage through highly targeted contextual advertising URL's.<n>These findings provide technical grounding for widespread user concerns, but also underscore the importance of consumer choice in the privacy implications of app-based fertility tracking.
  arXiv  Detail & Related papers  (2026-06-24T18:17:04Z)
• Phantoms and Disclosures: a Causal Framework for Auditing Synthetic Data [56.86147283213652]
  We present a customizable empirical auditing framework designed to detect and explain data disclosures.<n>Our framework introduces a mechanism to distinguish between "true disclosures"-where the system directly reproduces a user's information-and "phantom disclosures"-where the system incidentally generates a user's data.
  arXiv  Detail & Related papers  (2026-06-15T16:54:02Z)
• Efficient and Privacy-Preserving Distribution Statistics Analytics on Mobile Spatial Data [76.32349627923843]
  Performing efficient distributed statistical analysis on spatial data is crucial for real-time mobile computing applications.<n>Existing privacy-preserving techniques often introduce excessive overhead or inaccuracies.<n>In this paper, we design, implement, and evaluate the first system that supports efficient and privacy-preserving distribution statistics analysis for mobile spatial data.
  arXiv  Detail & Related papers  (2026-05-25T12:37:27Z)
• A Big Step Forward? A User-Centric Examination of iOS App Privacy Report and Enhancements [11.535543802697836]
  Apple introduced a new feature since iOS 15.2, App Privacy Report, to inform users about detailed insights into apps' data access and sharing.<n>This feature has been marketed as a big step forward in user privacy, but its real-world impacts on user privacy and control remain unexamined.<n>This work provides practical insights that could help enhance user privacy transparency.
  arXiv  Detail & Related papers  (2025-11-01T09:29:04Z)
• Differentially Private Synthetic Data Release for Topics API Outputs [63.79476766779742]
  We focus on one Privacy-Preserving Ads API: the Topics API, part of Google Chrome's Privacy Sandbox.<n>We generate a differentially-private dataset that closely matches the re-identification risk properties of the real Topics API data.<n>We hope this will enable external researchers to analyze the API in-depth and replicate prior and future work on a realistic large-scale dataset.
  arXiv  Detail & Related papers  (2025-06-30T13:46:57Z)
• Data-Juicer 2.0: Cloud-Scale Adaptive Data Processing for and with Foundation Models [83.65386456026441]
  Data-Juicer 2.0 is a data processing system backed by 100+ data processing operators spanning text, image, video, and audio modalities.<n>It supports more critical tasks including data analysis, synthesis, annotation, and foundation model post-training.<n>The system is publicly available and has been widely adopted in diverse research fields and real-world products such as Alibaba Cloud PAI.
  arXiv  Detail & Related papers  (2024-12-23T08:29:57Z)
• An In-Depth Investigation of Data Collection in LLM App Ecosystems [24.357971856302576]
  We examine OpenAI's GPT app ecosystem as a case study.<n>We propose an LLM-based framework to analyze the natural language specifications of GPT Actions and assess their data collection practices.
  arXiv  Detail & Related papers  (2024-08-23T17:42:06Z)
• Goodbye Tracking? Impact of iOS App Tracking Transparency and Privacy Labels [25.30364629335751]
  Apple introduced two significant changes with iOS 14: App Tracking Transparency (ATT), a mandatory opt-in system for enabling tracking on iOS, and Privacy Nutrition Labels. This paper addresses the impact of these changes on individual privacy and control by analysing two versions of 1,759 iOS apps from the UK App Store. We find that Apple itself engages in some forms of tracking and exempts invasive data practices like first-party tracking and credit scoring.
  arXiv  Detail & Related papers  (2022-04-07T16:32:58Z)
• Survey: Leakage and Privacy at Inference Time [59.957056214792665]
  Leakage of data from publicly available Machine Learning (ML) models is an area of growing significance. We focus on inference-time leakage, as the most likely scenario for publicly available models. We propose a taxonomy across involuntary and malevolent leakage, available defences, followed by the currently available assessment metrics and applications.
  arXiv  Detail & Related papers  (2021-07-04T12:59:16Z)
• Mind the GAP: Security & Privacy Risks of Contact Tracing Apps [75.7995398006171]
  Google and Apple have jointly provided an API for exposure notification in order to implement decentralized contract tracing apps using Bluetooth Low Energy. We demonstrate that in real-world scenarios the GAP design is vulnerable to (i) profiling and possibly de-anonymizing persons, and (ii) relay-based wormhole attacks that basically can generate fake contacts.
  arXiv  Detail & Related papers  (2020-06-10T16:05:05Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.