一句话:提出基于NLP的大规模方法,从2.87亿应用评论中提取并归纳移动应用隐私痛点。
论文关注如何在规模上理解用户对移动应用隐私的关切。作者提出一套NLP方法,先用二分类器区分隐私与非隐私评论,再通过聚类归并相似隐私问题,并用摘要指标选取代表性评论概括各簇。该方法应用于Google Play 29个类别、约200万应用、2.87亿条评论,识别出约44万条隐私相关评论。结果显示隐私问题遍布所有类别,既有跨类别共性痛点,也有类别特有议题;经验证据确认不必要权限、个人信息收集、隐私控制不便、追踪与数据出售等主题,并发现用户互相警告、因隐私卸载应用及奖励隐私友好应用等意外现象。最后讨论了对开发者和应用商店的启示。
In this paper we present a methodology to analyze users' concerns and perspectives about privacy at scale. We leverage NLP techniques to process millions of mobile app reviews and extract privacy concerns. Our methodology is composed of a binary classifier that distinguishes between privacy and non-privacy related reviews. We use clustering to gather reviews that discuss similar privacy concerns, and employ summarization metrics to extract representative reviews to summarize each cluster. We apply our methods on 287M reviews for about 2M apps across the 29 categories in Google Play to identify top privacy pain points in mobile apps. We identified approximately 440K privacy related reviews. We find that privacy related reviews occur in all 29 categories, with some issues arising across numerous app categories and other issues only surfacing in a small set of app categories. We show empirical evidence that confirms dominant privacy themes - concerns about apps requesting unnecessary permissions, collection of personal information, frustration with privacy controls, tracking and the selling of personal data. As far as we know, this is the first large scale analysis to confirm these findings based on hundreds of thousands of user inputs. We also observe some unexpected findings such as users warning each other not to install an app due to privacy issues, users uninstalling apps due to privacy reasons, as well as positive reviews that reward developers for privacy friendly apps. Finally we discuss the implications of our method and findings for developers and app stores.