A Big Step Forward? A User-Centric Examination of iOS App Privacy Report and Enhancements
Liu Wang, Dong Wang, Shidong Pan, Zheng Jiang, Haoyu Wang, Yi Wang

TL;DR
This study critically evaluates Apple's iOS App Privacy Report, revealing limited real-world impact due to user misunderstandings, and proposes targeted technical enhancements to improve privacy transparency and user understanding.
Contribution
The paper offers a systematic assessment of the App Privacy Report's effectiveness and introduces novel purpose inference and domain clarification methods to enhance privacy transparency.
Findings
Users find the privacy report lacks clarity on data access purposes.
Proposed enhancements improve user understanding and trust.
The privacy report has limited practical impact without targeted improvements.
Abstract
The prevalent engagement with mobile apps underscores the importance of understanding their data practices. Transparency plays a crucial role in this context, ensuring users to be informed and give consent before any data access occurs. Apple introduced a new feature since iOS 15.2, App Privacy Report, to inform users about detailed insights into apps' data access and sharing. This feature continues Apple's trend of privacy-focused innovations (following Privacy Nutrition Labels), and has been marketed as a big step forward in user privacy. However, its real-world impacts on user privacy and control remain unexamined. We thus proposed an end-to-end study involving systematic assessment of the App Privacy Report's real-world benefits and limitations, LLM-enabled and multi-technique synthesized enhancements, and comprehensive evaluation from both system and user perspectives. Through a…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsPrivacy, Security, and Data Protection · Advanced Malware Detection Techniques · Mobile Health and mHealth Applications
