Studying Preferences and Concerns about Information Disclosure in Email Notifications
Yongsung Kim, Adam Fourney, Ece Kamar

TL;DR
This study investigates how often email notifications cause accidental information disclosures and examines user preferences and concerns, using surveys and labeling studies, to inform the design of privacy-aware notification systems.
Contribution
It provides empirical data on disclosure risks and introduces machine learning methods to predict user comfort with notifications based on context.
Findings
53% of users face at least 10% risk of disclosure from email notifications
User concerns vary with meeting and email attributes such as recipients and attendees
Machine learning models can predict user comfort levels with notifications
Abstract
The proliferation of network-connected devices and applications has resulted in people receiving dozens, or hundreds, of notifications per day. When people are in the presence of others, each notification poses some risk of accidental information disclosure; onlookers may see notifications appear above the lock screen of a mobile phone, on the periphery of a desktop or laptop display, or projected onscreen during a presentation. In this paper, we quantify the prevalence of these accidental disclosures in the context of email notifications, and we study people's relevant preferences and concerns. Our results are compiled from an exploratory retrospective survey of 131 respondents, and a separate contextual-labeling study in which 169 participants labeled 1,040 meeting-email pairs. We find that, for 53% of people, at least 1 in 10 email notifications poses an information disclosure risk.…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsPersonal Information Management and User Behavior · Privacy, Security, and Data Protection · User Authentication and Security Systems
