Using the Metadata-Based App-PI Ecosystem to Assess the Privacy Impact of Health Apps

Mobile applications (apps) facilitate the management of devices and sensors from mobile devices in IoE environments. However, their use carries risks for the privacy of their users: many of them manage personal data. The App-PI (App Privacy Impact) ecosystem analyzes the impact of apps on privacy, a...

Descripción completa

Detalles Bibliográficos
Autores: Martínez González, María Mercedes, Pérez de la Fuente, Alejandro, Aparicio De La Fuente, Amador, Criado-Lozano, Pablo A.
Tipo de recurso: artículo
Estado:Versión aceptada para publicación
Fecha de publicación:2024
País:España
Institución:Universidad de Valladolid
Repositorio:UVaDOC. Repositorio Documental de la Universidad de Valladolid
OAI Identifier:oai:uvadoc.uva.es:10324/72998
Acceso en línea:https://doi.org/10.1007/978-3-031-77571-0
https://uvadoc.uva.es/handle/10324/72998
Access Level:acceso abierto
Palabra clave:privacidad, ciberseguridad
Privacy, Metadata, Mobile apps, Health apps, IoE
Descripción
Sumario:Mobile applications (apps) facilitate the management of devices and sensors from mobile devices in IoE environments. However, their use carries risks for the privacy of their users: many of them manage personal data. The App-PI (App Privacy Impact) ecosystem analyzes the impact of apps on privacy, addressing the challenge of knowing, under- standing and mitigating these risks. In App-PI, a metadata warehouse, a set of analysis tools that calcu- late indicators, a visualization platform, and verification processes, col- laborate. Data flows between these components to provide persons using the visualization platform with accurate, reliable, and understandable information. The warehouse hosts metadata related to the privacy and security of mobile apps. The data flow starts with the collection and integration of data hosted in the warehouse. The analysis tools use these data to calculate indicators that provide objective measures of the risk associated with each app. These values are the input for a verification process based on static analysis, which provides confidence. To make it easier for end users to understand these indicators, they are displayed on the visualization platform with easy-to-understand charts. The flows and usefulness of this ecosystem are shown for health and wellness apps, characteristic of IoE environments.