Developing privacy guidelines for social location disclosure applications and services

ABSTRACT

In this article, we describe the design process of Reno, a location-enhanced, mobile coordination tool and person finder. The design process included three field experiments: a formative Experience Sampling Method (ESM) study, a pilot deployment and an extended user study. These studies were targeted at the significant personal security, privacy and data protection concerns caused by this application. We distil this experience into a small set of guidelines for designers of social mobile applications and show how these guidelines can be applied to a different application, called Boise. These guidelines cover issues pertaining to personal boundary definition, control, deception and denial, and group vs. individual communication. We also report on lessons learned from our evaluation experience, which might help practitioners in designing novel mobile applications, including the choice and characterization of users for testing security and privacy features of designs, the length of learning curves and their effect on evaluation and the impact of peculiar deployment circumstances on the results of these finely tuned user studies.

REFERENCES

• 1: Barkhuus, L., Dey, A. Location-Based Services for Mobile Telephony: a study of users' privacy concerns. In Proc. Interact 2003, 709--712, IOS Press, Amsterdam, 2003.
• 2: Brown, K. On The Trail Of Location Services. Wireless Week, p. 18, March 1, 2004, Reed Business Information.
• 3: Sunny Consolvo , Ian E. Smith , Tara Matthews , Anthony LaMarca , Jason Tabert , Pauline Powledge, Location disclosure to social relations: why, when, & what people want to share, Proceedings of the SIGCHI conference on Human factors in computing systems, April 02-07, 2005, Portland, Oregon, USA [doi>10.1145/1054972.1054985]
• 4: Darrah, C. N. Family Models, Model Families. In Revisiting the American Dream: How U. S. Families Cope with Work and Family Life, American Anthropological Association Annual Conference, Chicago, IL, November 23, 2003.
• 5: DePaulo B. M., Kashy D. A. Everyday Lies in Close and Casual Relationships. Journal of Personality and Social Psychology, 74 (1), 63--79, American Psychological Association, January 1998.
• 6: Ubiquity Labs, Dodgeball. Available online at http://www.dodgeball.com. Last accessed: Feb 17, 2005.
• 7: Fithian, R., Iachello, G., Moghazy, J., Pousman, Z., Stasko, J. The Design and Evaluation of a Mobile Location-aware Handheld Event Planner. In Proc. of the Fifth International Symposium on Human Computer Interaction with Mobile Devices and Services (Mobile HCI 2003), Udine, Italy, Sept. 8--11, 2003, LNCS 2795, 145--160, Springer Verlag.
• 8: Grinter, R. E., Eldridge, M. 'y do tngrs luv 2 txt msg?'. In: Proc. Seventh European Conference on Computer-Supported Cooperative Work ECSCW '01, 219--238, Kluwer Academic Publishers, 2001.
• 9: Ito, M. and Daisuke, O. Mobile Phones, Japanese Youth and the Replacement of Social Contact. In Ling, R. and Pedersen, P. (eds.) Front Stage/Back Stage: Mobile communication and the Renegotiation of the Social Sphere, Conference Proceedings, 22--24 June 2003, Grimstad, Norway.
• 10: LaMarca, A., Chawathe, Y., Consolvo, S., Hightower, J., Smith, I., Scott, J., Sohn, T., Howard, J., Hughes, J., Potter, F., Tabert, J., Powledge, P., Borriello, G., Schilit, B. Place Lab: Device Positioning Using Radio Beacons in the Wild. In Proc. Pervasive 2005, Springer Verlag, 2005.
• 11: Marc Langheinrich, Privacy by Design - Principles of Privacy-Aware Ubiquitous Systems, Proceedings of the 3rd international conference on Ubiquitous Computing, p.273-291, September 30-October 02, 2001, Atlanta, Georgia, USA
• 12: Laurier, E. Why People Say Where They Are During Mobile Phone Calls. Environment and Planning D: Society and Space, 19, 485--504, Pion, London, UK, 2001.
• 13: Scott Lederer , Jennifer Mankoff , Anind K. Dey, Who wants to know what when? privacy preference determinants in ubiquitous computing, CHI '03 extended abstracts on Human factors in computing systems, April 05-10, 2003, Ft. Lauderdale, Florida, USA [doi>10.1145/765891.765952]
• 14: Ling, R. Norwegian teens, mobile telephony and SMS use in school. Technical Report Telenor R&D N 7/2000, Telenor, 2000.
• 15: Leysia Palen , Paul Dourish, Unpacking "privacy" for a networked world, Proceedings of the SIGCHI conference on Human factors in computing systems, April 05-10, 2003, Ft. Lauderdale, Florida, USA [doi>10.1145/642611.642635]
• 16: P&AB: Consumer Privacy Attitudes: A Major Shift Since 2000 and Why. In Privacy & American Business Newsletter, 10 (6), Sep 2003.
• 17: Schegloff E. A. Notes on a Conversational Practice: Formulating Place. In Sudnow, D. N. (ed.), Studies in Social Interaction, 75--119, MacMillan, The Free Press, New York, 1972.
• 18: Smith, I., Consolvo, S., Hightower, J., Hughes, J., Iachello, G., LaMarca, A., Abowd, G. D., Scott, J., Sohn, T. Social Disclosure Of Place: From Location Technology to Communication Practice. In Proc. Pervasive 2005, Springer Verlag, 2005.
• 19: United States Department of Health, Education and Welfare. Records, Computers and the Rights of Citizens. Report of the Secretary's Advisory Committee on Automated Personal Data Systems, 1973.
• 20: Weilenmann A. "I Can't Talk Now: I'm In A Fitting Room:" Formulating Availability And Location In Mobile Phone Conversations. Environment and Planning A, 35, 1589--1605, Pion, London, UK, 2003.
• 21: The Yankee Group. 2004 Mobile Users Survey. Synopsis available at http://www.yankeegroup.com. Last accessed on Feb. 17, 2005.

INDEX TERMS

Primary Classification:
  D. Software
  D.2 SOFTWARE ENGINEERING
      D.2.2 Design Tools and Techniques

Additional Classification:
  D. Software
  D.2 SOFTWARE ENGINEERING
      D.2.1 Requirements/Specifications
          Subjects: Elicitation methods (e.g., rapid prototyping, interviews, JAD)

  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.2 Social Issues
  K.8 PERSONAL COMPUTING
      K.8.m Miscellaneous

General Terms:
Design, Human Factors, Security

Keywords:
iterative design, people finder, privacy, prototyping, social mobile applications