Most service providers, such as Google, save logs from data generated by users while using the service. Many service providers provide users with privacy controls to manage whether, how, and for how long the data is saved and used by the service provider. While most prior studies focused on the negative side of users' activity logs, such as users' lack of awareness about the logs' privacy controls and users' privacy concerns toward their data, this work aims to provide a balanced view of users' perceptions regarding activity logs by considering the positive, negative, and extremely negative (hence disastrous) sides, as well as the misconceptions of activity logs. In this work, we present a case study of Google's Activity controls by conducting a secondary analysis of interview data from 30 Google personal account holders in Saudi Arabia. Using template analysis, we analyzed the data from the lens of four main themes: the good, the bad, the misconception, and the disastrous aspects of users' activity logs from the users' perspective. Our findings uncover new themes and use cases, offering a balanced view of users' perceptions of activity logs, and provide a better understanding and a useful source for subsequent studies on related topics. We conclude with practical recommendations for service providers, privacy researchers and experts, and users alike.
翻译:大多数服务提供商(如谷歌)会保存用户在使用服务过程中产生的数据日志。许多服务提供商向用户提供隐私控制选项,用于管理数据是否被保存、保存方式及保存时长,以及服务提供商对这些数据的使用方式。尽管以往研究多聚焦于用户活动日志的负面层面,例如用户对日志隐私控制缺乏认知以及对其数据的隐私担忧,本研究旨在通过考量活动日志的正面、负面及极端负面的【即灾难性)影响,同时兼顾用户对活动日志的误解,提供一种平衡的视角来审视用户对活动日志的认知。本研究以谷歌的活动控制功能为案例,通过对沙特阿拉伯30名谷歌个人账户持有者的访谈数据进行二次分析,采用模板分析法,从四大主题(即用户视角下活动日志的益处、弊端、误解与灾难)对数据展开剖析。研究结果揭示了新的主题与使用场景,形成了对用户活动日志认知的均衡理解,为后续相关研究提供了更深入的洞察与有价值的参考。最后,我们为服务提供商、隐私研究者与专家以及用户提出了实践性建议。