Location tracking apps and privacy implications

Authored by eurekalert.org and submitted by pravenau

How much personal information can our phone apps gather through location tracking? To answer this question, two researchers - Mirco Musolesi (University of Bologna, Italy) and Benjamin Baron (University College London, UK) - carried out a field study using an app specifically developed for this research. Through the app employed in the study - published in Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies - researchers were able to identify which kind of personal information the app extracted and its privacy sensitivity according to users.

"Users are largely unaware of the privacy implications of some permissions they grant to apps and services, in particular when it comes to location-tracking information", explains Mirco Musolesi. "Thanks to machine learning techniques, these data provide sensitive information such as the place where users live, their habits, interests, demographics, and information about users' personalities".

This is the first extensive study shedding light on the range of personal information that can be inferred from location-tracking data. Consequently, the study also shows how collecting such information can represent a violation of the users' privacy. To this end, the researchers developed a mobile application - TrackingAdvisor - that continuously collects user location. From the location data, the app can extract personal information and asks users to give feedback on the correctness of such information as well as to rate its relevance in terms of privacy sensitivity.

69 users participated in the study and used TrackAdvisor for at least two weeks. TrackAdvisor tracked more than 200,000 locations, identifying approximately 2,500 places and collecting almost 5,000 pieces of personal information concerning both demographics and personality. Among the data gathered, the users find that the most sensitive pieces of information were the ones about health, socio-economic situation, ethnicity, and religion.

"We think it is important to show users the amount and quality of information that apps can collect through location tracking", continues Musolesi. "Equally important for us is to understand whether users think that sharing information with app managers or marketing firms is acceptable or deem it a violation of their privacy".

According to the researchers, analyses like this pave the way to designing targeted advertising systems that help users protect their privacy, especially with the data they deem more sensitive.

"Thanks to such systems, users interested - for example - in protecting information about their own health could receive a notification each time they go to a health clinic or hospital", confirms Musolesi. "But there is more. This could also lead to the development of systems that can automatically block the collection of sensitive data from third parties thanks to previously defined privacy settings".

The journal Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies published this study titled "Where You Go Matters: A Study on the Privacy Implications of Continuous Location Tracking". The authors of the study are professor Mirco Musolesi from the Department of Computer Science and Engineering of the University of Bologna (Italy) and Benjamin Baron who is a researcher at University College London (UK).

Adeno on February 20th, 2021 at 03:02 UTC »

I hate these tracking apps. They're annoying. "Enable me to see this website! Enable to me access this service! Enable Enable Enable!!!"

Imagine if these tracking bugs were used to discriminate people based on their religion, race, or political ideologies.

Electronic_Purple_80 on February 20th, 2021 at 02:04 UTC »

Exactly who didn't expect this?

pravenau on February 20th, 2021 at 00:31 UTC »

Original Article: https://doi.org/10.1145/3432699

Abstract:

Data gathered from smartphones enables service providers to infer a wide range of personal information about their users, such as their traits, their personality, and their demographics. This personal information can be made available to third parties, such as advertisers, sometimes unbeknownst to the users. Leveraging location information, advertisers can serve ads micro-targeted to users based on the places they visited. Understanding the types of information that can be extracted from location data and implications in terms of user privacy is of critical importance.

In this context, we conducted an extensive in-the-wild research study to shed light on the range of personal information that can be inferred from the places visited by users, as well as privacy sensitivity of the personal information. To this end, we developed TrackingAdvisor, a mobile application that continuously collects user location and extracts personal information from it. The app also provides an interface to give feedback about the relevance of the personal information inferred from location data and its corresponding privacy sensitivity. Our findings show that, while some personal information such as social activities is not considered private, other information such as health, religious belief, ethnicity, political opinions, and socio-economic status is considered private by the participants of the study. This study paves the way to the design of privacy-preserving systems that provide contextual recommendations and explanations to help users further protect their privacy by making them aware of the consequences of sharing their personal data.