Smartphone manufacturer provided default features (e.g., default location services, iCloud, Google Assistant, ad tracking) enhance the usability and extend the functionality of these devices. Prior studies have highlighted smartphone vulnerabilities and how users' data can be harvested without their knowledge. However, little is known about manufacturer provided default features in this regard -- their usability concerning configuring them during usage, and how users perceive them with regards to privacy. To bridge this gap, we conducted a task-based study with 27 Android and iOS smartphone users in order to learn about their perceptions, concerns and practices, and to understand the usability of these features with regards to privacy. We explored the following: users' awareness of these features, why and when do they change the settings of these features, the challenges they face while configuring these features, and finally the mitigation strategies they adopt. Our findings reveal that users of both platforms have limited awareness of these features and their privacy implications. Awareness of these features does not imply that a user can easily locate and adjust them when needed. Furthermore, users attribute their failure to configure default features to hidden controls and insufficient knowledge on how to configure them. To cope with difficulties of finding controls, users employ various coping strategies, some of which are platform specific but most often applicable to both platforms. However, some of these coping strategies leave users vulnerable.
翻译:智能手机制造商提供的默认功能(如默认位置服务、iCloud、谷歌助手、广告跟踪等)提升了设备的可用性并扩展了其功能性。先前研究已指出智能手机的漏洞以及用户数据如何在不知情的情况下被收集。然而,针对制造商提供的默认功能——用户在使用过程中配置这些功能的可用性,以及用户对其隐私方面的认知——目前知之甚少。为填补这一空白,我们对27名安卓和iOS智能手机用户开展了一项基于任务的研究,以了解他们的认知、担忧与实践,并理解这些功能在隐私方面的可用性。我们探究了以下内容:用户对这些功能的认知程度,他们为何以及何时更改这些功能的设置,配置这些功能时面临的挑战,以及最终采用的缓解策略。研究结果表明,两种平台的用户对这些功能及其隐私影响均认知有限。对功能的认知并不意味着用户能在需要时轻松定位并调整设置。此外,用户将配置默认功能的失败归因于控制选项的隐蔽性以及缺乏配置方法的相关知识。为应对查找控制选项的困难,用户采取了多种应对策略,其中部分策略具有平台特异性,但多数策略可适用于两种平台。然而,部分应对策略会导致用户易受隐私风险侵害。