Users' Activity Logs: the Good, the Bad, the Misconception, and the Disastrous

TL;DR

This study offers a balanced analysis of users' perceptions of activity logs, highlighting positive, negative, and disastrous aspects, based on a case study of Google users in Saudi Arabia.

Contribution

It presents a comprehensive view of user perceptions of activity logs, including misconceptions and extreme concerns, through qualitative analysis of interview data.

Findings

Uncovered new themes and use cases related to activity logs.

Identified misconceptions and extreme perceptions among users.

Provided practical recommendations for stakeholders.

Abstract

Most service providers, such as Google, save logs from data generated by users while using the service. Many service providers provide users with privacy controls to manage whether, how, and for how long the data is saved and used by the service provider. While most prior studies focused on the negative side of users' activity logs, such as users' lack of awareness about the logs' privacy controls and users' privacy concerns toward their data, this work aims to provide a balanced view of users' perceptions regarding activity logs by considering the positive, negative, and extremely negative (hence disastrous) sides, as well as the misconceptions of activity logs. In this work, we present a case study of Google's Activity controls by conducting a secondary analysis of interview data from 30 Google personal account holders in Saudi Arabia. Using template analysis, we analyzed the data from the lens of four main themes: the good, the bad, the misconception, and the disastrous aspects of users' activity logs from the users' perspective. Our findings uncover new themes and use cases, offering a balanced view of users' perceptions of activity logs, and provide a better understanding and a useful source for subsequent studies on related topics. We conclude with practical recommendations for service providers, privacy researchers and experts, and users alike.