The Power of Words: A Comprehensive Analysis of Rationales and Their Effects on Users' Permission Decisions
Yusra Elbitar, Alexander Hart, Sven Bugiel
Abstract
—Rationales offer a method for app developers to convey their permission needs to users. While guidelines and recommendations exist on how to request permissions, developers have the creative freedom to design and phrase these rationales. In this work, we explore the characteristics of real-world rationales and how their building blocks affect users’ permission decisions and their evaluation of those decisions. Through an analysis of 720 sentences and 428 screenshots of rationales from the top apps of Google Play, we identify the various phrasing and design elements of rationales. Subsequently, in a user study involving 960 participants, we explore how different combinations of phrasings impact users’ permission decision-making process. By aligning our insights with established recommendations, we offer actionable guidelines for developers, aiming to make rationales a usable security instrument for users.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 51f4c900-6e33-4a5b-aee7-7c668177b7e6Cited by top-tier papers1
Ask how each one uses itBuilds on8
- Understanding Challenges for Developers to Create Accurate Privacy Nutrition LabelsTianshi Li, Kayla Reiman, Yuvraj Agarwal, Lorrie Faith Cranor et al.CHI 2022 · 56 citations
- Driving 2FA Adoption at Scale: Optimizing Two-Factor Authentication Notification Design PatternsMaximilian Golla, Grant Ho, Marika Lohmus, Monica Pulluri et al.USENIX Security 2021 · 48 citations
- Can Systems Explain Permissions Better? Understanding Users' Misperceptions under Smartphone Runtime Permission ModelBingyu Shen, Lili Wei, Chengcheng Xiang, Yudong Wu et al.USENIX Security 2021 · 45 citations
- A Large Scale Study of User Behavior, Expectations and Engagement with Android PermissionsWeicheng Cao, Chunqiu Xia, Sai Teja Peddinti, David Lie et al.USENIX Security 2021 · 42 citations
- FlowCog: Context-aware Semantics Extraction and Analysis of Information Flow Leaks in Android AppsXiang Pan, Yinzhi Cao, Xuechao Du, Boyuan He et al.USENIX Security 2018 · 39 citations
Related papers
- Explanation Beats Context: The Effect of Timing & Rationales on Users' Runtime Permission DecisionsYusra Elbitar, Michael Schilling, Trung Tin Nguyen, Michael Backes et al.USENIX Security 2021 · 25 citations
- Schrödinger's security: opening the box on app developers' security rationaleDirk van der Linden, Pauline Anthonysamy, Bashar Nuseibeh, Thein Than Tun et al.ICSE 2020 · 38 citations
- Stuck in the Permissions With You: Developer & End-User Perspectives on App Permissions & Their Privacy RamificationsMohammad Tahaei, Ruba Abu-Salma, Awais RashidCHI 2023 · 36 citations
- Websites Need Your Permission Too - User Sentiment and Decision-Making on Web Permission Prompts in Desktop ChromeMarian HarbachCHI 2024 · 3 citations
- Why "why"? The Importance of Communicating Rationales for Edits in Collaborative WritingSo Yeon Park, Sang Won LeeCHI 2023 · 5 citations
