"Privacy is the Boring Bit": User Perceptions and Behaviour in the Internet-of-Things

TL;DR

This study explores the privacy paradox in the Internet-of-Things, revealing that despite privacy concerns, users often purchase IoT devices due to lack of awareness and usability issues, highlighting the need for practical solutions.

Contribution

First comprehensive evaluation of the privacy paradox across a broad range of IoT devices, combining surveys and interviews to understand user perceptions and behaviors.

Findings

Users perceive privacy risks but still purchase IoT devices.

IoT devices are less usable and familiar, constraining protective behaviors.

The privacy paradox is more prevalent in IoT due to lack of awareness.

Abstract

In opinion polls, the public frequently claim to value their privacy. However, individuals often seem to overlook the principle, contributing to a disparity labelled the `Privacy Paradox'. The growth of the Internet-of-Things (IoT) is frequently claimed to place privacy at risk. However, the Paradox remains underexplored in the IoT. In addressing this, we first conduct an online survey (N = 170) to compare public opinions of IoT and less-novel devices. Although we find users perceive privacy risks, many still decide to purchase smart devices. With the IoT rated less usable/familiar, we assert that it constrains protective behaviour. To explore this hypothesis, we perform contextualised interviews (N = 40) with the public. In these dialogues, owners discuss their opinions and actions with a personal device. We find the Paradox is significantly more prevalent in the IoT, frequently justified by a lack of awareness. We finish by highlighting the qualitative comments of users, and suggesting practical solutions to their issues. This is the first work, to our knowledge, to evaluate the Privacy Paradox over a broad range of technologies.