A User-Centric Context-Aware Permission Governance Framework for Privacy Control in Default Mobile Applications

• URL: http://arxiv.org/abs/2608.27914v1
• Date: Fri, 28 Aug 2026 04:41:39 GMT
• Title: A User-Centric Context-Aware Permission Governance Framework for Privacy Control in Default Mobile Applications
• Abstract summary: This paper presents a context-sensitive, user-focused permission governance framework for default mobile applications.<n>It introduces a feature-based authorization option, "Allow When Needed," that restricts access to the functionality requiring the data.<n>A weighted scoring system estimates the privacy implications of user choices based on permission sensitivity and authorization type.
• Score: 0.0
• License: http://creativecommons.org/licenses/by-nc-nd/4.0/
• Abstract: Mobile operating systems provide runtime permission controls intended to improve user control over sensitive data. However, default or pre-installed applications are deeply integrated into the system, may operate with elevated privileges, and are difficult for users to scrutinize. Existing permission models generally grant persistent or temporary access for an application session without distinguishing among individual features, leaving users uncertain about when and why data are accessed. This paper presents a context-sensitive, user-focused permission governance framework for default mobile applications. It introduces a feature-based authorization option, "Allow When Needed," that restricts access to the functionality requiring the data rather than the entire application session. A weighted scoring system estimates the privacy implications of user choices based on permission sensitivity and authorization type. A web-based simulation platform was developed to model 30 realistic permission-request situations across six commonly used default application types and support controlled early-stage evaluation before native implementation. The exploratory assessment combined a cross-sectional survey of 104 respondents examining permission awareness and behavior with formative usability testing involving eight participants interacting with the prototype. Survey findings indicate that users do not consistently examine default-application permissions and prefer contextual explanations before granting access. The results provide preliminary evidence that context-aware permission governance can improve user understanding and decision clarity. This simulation-based study represents an initial step toward evaluating feature-level authorization and privacy-feedback mechanisms before native mobile deployment.

Related papers

• Analysing User Reviews to Identify User Concerns Around Permissions in AI Apps [2.1858709012908903]
  This paper presents a machine learning model for classifying AI app reviews into permission-related categories.<n>Because user reviews are unstructured, assembling a conventional labeled training set is difficult.<n>To address this, AI-generated security and permission reviews are used to identify relevant training examples from a large corpus of human-written reviews.<n>The proposed approach classified permission reviews with an accuracy of 82%.
  arXiv  Detail & Related papers  (2026-07-31T12:25:20Z)
• Preference-Aware Rubric Learning for Personalized Evaluation [59.539429430690156]
  Existing evaluation methods fail to capture user-specific preferences embedded in long-term interaction histories.<n>We propose Personalized Evaluation as Learning, a paradigm that formulates personalized evaluation as a learning problem rather than a static judgment.<n>Experiments show that PARL consistently induces high-fidelity rubrics that reliably identify user-aligned responses and generalize across users.
  arXiv  Detail & Related papers  (2026-05-29T17:00:55Z)
• UserHarness: Harnessing User Minds for Stronger Agent Theory-of-Mind [51.47914365631888]
  UserHarness is a simple framework that reframes Theory-of-Mind (ToM) reasoning as explicit user-mind reconstruction.<n>It decomposes the user's mental state, its relation to the external environment, and the actions that follow from it, enabling agents to track what the user observes, believes, intends, and does.
  arXiv  Detail & Related papers  (2026-05-26T21:45:45Z)
• Listen to the Voices of Everyday Users: Democratizing Privacy Ratings for Sensitive Data Access in Mobile Apps [8.301057281097679]
  Mobile apps frequently request excessive data access, raising significant privacy concerns.<n>Existing regulatory mechanisms rely on expert-driven audits that face challenges in scalability, neutrality, and alignment with user expectations.<n>We propose a novel paradigm--democratizing privacy assessment, inspired by prior work on user-centric privacy perceptions.
  arXiv  Detail & Related papers  (2026-04-27T05:47:58Z)
• PrivacyAssist: A User-Centric Agent Framework for Detecting Privacy Inconsistencies in Android Apps [0.9892966978799635]
  This paper presents PrivacyAssist, a multi-agent LLM-based platform that detects inconsistencies between user-granted permissions and developers' declared sensitive data collection and sharing practices.<n>We evaluate PrivacyAssist with 200 users and 2,347 Android apps, finding that only 16% of apps are fully consistent between granted permissions and declared data practices.
  arXiv  Detail & Related papers  (2026-04-25T10:58:05Z)
• KnowU-Bench: Towards Interactive, Proactive, and Personalized Mobile Agent Evaluation [72.01173512175531]
  KnowU-Bench is an online benchmark for personalized mobile agents.<n>It covers 42 general GUI tasks, 86 personalized tasks, and 64 proactive tasks.<n>Our experiments reveal a striking degradation: agents that excel at explicit task execution fall below 50% under vague instructions.
  arXiv  Detail & Related papers  (2026-04-09T16:50:50Z)
• Grant, Verify, Revoke: A User-Centric Pattern for Blockchain Compliance [9.133320151595084]
  Decentralized web applications face an inherent conflict between public verifiability and personal privacy.<n>We introduce a Selective Disclosure Framework designed to restore user sovereignty by decoupling eligibility verification from identity revelation.<n>Our evaluation shows that client-side proof generation takes under 200ms, enabling a seamless interactive experience on commodity hardware.
  arXiv  Detail & Related papers  (2026-03-16T17:06:44Z)
• PersonaAgent: When Large Language Model Agents Meet Personalization at Test Time [87.99027488664282]
  PersonaAgent is a framework designed to address versatile personalization tasks.<n>It integrates a personalized memory module and a personalized action module.<n>Test-time user-preference alignment strategy ensures real-time user preference alignment.
  arXiv  Detail & Related papers  (2025-06-06T17:29:49Z)
• Creating General User Models from Computer Use [53.59999173952482]
  This paper presents an architecture for a general user model (GUM) that learns about you by observing any interaction you have with your computer.<n>The GUM takes as input any unstructured observation of a user (e.g., device screenshots) and constructs confidence-weighted propositions that capture user knowledge and preferences.
  arXiv  Detail & Related papers  (2025-05-16T04:00:31Z)
• mPSAuth: Privacy-Preserving and Scalable Authentication for Mobile Web Applications [0.0]
  mPSAuth is an approach for continuously tracking various data sources reflecting user behavior and estimating the likelihood of the current user being legitimate. We show that mPSAuth can provide high accuracy with low encryption and communication overhead, while the effort for the inference is increased to a tolerable extent.
  arXiv  Detail & Related papers  (2022-10-07T12:49:34Z)
• Unsupervised Model Personalization while Preserving Privacy and Scalability: An Open Problem [55.21502268698577]
  This work investigates the task of unsupervised model personalization, adapted to continually evolving, unlabeled local user images. We provide a novel Dual User-Adaptation framework (DUA) to explore the problem. This framework flexibly disentangles user-adaptation into model personalization on the server and local data regularization on the user device.
  arXiv  Detail & Related papers  (2020-03-30T09:35:12Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.