{"id":"https://openalex.org/W7133359579","doi":"https://doi.org/10.1109/tps-isa67132.2025.00064","title":"Evaluating Security Features in Mobile Health Apps: A Systematic Review","display_name":"Evaluating Security Features in Mobile Health Apps: A Systematic Review","publication_year":2025,"publication_date":"2025-11-12","ids":{"openalex":"https://openalex.org/W7133359579","doi":"https://doi.org/10.1109/tps-isa67132.2025.00064"},"language":null,"primary_location":{"id":"doi:10.1109/tps-isa67132.2025.00064","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tps-isa67132.2025.00064","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 7th International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA)","raw_type":"proceedings-article"},"type":"review","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008675629","display_name":"Y. Cao","orcid":null},"institutions":[{"id":"https://openalex.org/I170201317","display_name":"University of Pittsburgh","ror":"https://ror.org/01an3r305","country_code":"US","type":"education","lineage":["https://openalex.org/I170201317"]},{"id":"https://openalex.org/I4210123366","display_name":"Health Information Management","ror":"https://ror.org/02zmq8s40","country_code":"BE","type":"other","lineage":["https://openalex.org/I4210123366"]}],"countries":["BE","US"],"is_corresponding":false,"raw_author_name":"Yuanyuan Cao","raw_affiliation_strings":["University of Pittsburgh,Dept of Health Information Management,Pittsburgh,PA,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pittsburgh,Dept of Health Information Management,Pittsburgh,PA,USA","institution_ids":["https://openalex.org/I170201317","https://openalex.org/I4210123366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127945065","display_name":"Yi Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I170201317","display_name":"University of Pittsburgh","ror":"https://ror.org/01an3r305","country_code":"US","type":"education","lineage":["https://openalex.org/I170201317"]},{"id":"https://openalex.org/I4210123366","display_name":"Health Information Management","ror":"https://ror.org/02zmq8s40","country_code":"BE","type":"other","lineage":["https://openalex.org/I4210123366"]}],"countries":["BE","US"],"is_corresponding":false,"raw_author_name":"Yi Xu","raw_affiliation_strings":["University of Pittsburgh,Dept of Health Information Management,Pittsburgh,PA,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pittsburgh,Dept of Health Information Management,Pittsburgh,PA,USA","institution_ids":["https://openalex.org/I170201317","https://openalex.org/I4210123366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053701097","display_name":"Leming Zhou","orcid":"https://orcid.org/0000-0003-4398-0267"},"institutions":[{"id":"https://openalex.org/I170201317","display_name":"University of Pittsburgh","ror":"https://ror.org/01an3r305","country_code":"US","type":"education","lineage":["https://openalex.org/I170201317"]},{"id":"https://openalex.org/I4210123366","display_name":"Health Information Management","ror":"https://ror.org/02zmq8s40","country_code":"BE","type":"other","lineage":["https://openalex.org/I4210123366"]}],"countries":["BE","US"],"is_corresponding":false,"raw_author_name":"Leming Zhou","raw_affiliation_strings":["University of Pittsburgh,Dept of Health Information Management,Pittsburgh,PA,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pittsburgh,Dept of Health Information Management,Pittsburgh,PA,USA","institution_ids":["https://openalex.org/I170201317","https://openalex.org/I4210123366"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.4856822,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"536","last_page":"542"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11446","display_name":"Mobile Health and mHealth Applications","score":0.6995999813079834,"subfield":{"id":"https://openalex.org/subfields/3600","display_name":"General Health Professions"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},"topics":[{"id":"https://openalex.org/T11446","display_name":"Mobile Health and mHealth Applications","score":0.6995999813079834,"subfield":{"id":"https://openalex.org/subfields/3600","display_name":"General Health Professions"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T11519","display_name":"Digital Mental Health Interventions","score":0.03970000147819519,"subfield":{"id":"https://openalex.org/subfields/3202","display_name":"Applied Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.02370000071823597,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mhealth","display_name":"mHealth","score":0.8636000156402588},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5037999749183655},{"id":"https://openalex.org/keywords/data-security","display_name":"Data security","score":0.45969998836517334},{"id":"https://openalex.org/keywords/health-care","display_name":"Health care","score":0.44600000977516174},{"id":"https://openalex.org/keywords/systematic-review","display_name":"Systematic review","score":0.44449999928474426},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.44339999556541443},{"id":"https://openalex.org/keywords/mobile-apps","display_name":"Mobile apps","score":0.4043000042438507},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.396699994802475},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.34549999237060547}],"concepts":[{"id":"https://openalex.org/C2779363104","wikidata":"https://www.wikidata.org/wiki/Q17069079","display_name":"mHealth","level":3,"score":0.8636000156402588},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5368000268936157},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5235000252723694},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5037999749183655},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.45969998836517334},{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.44600000977516174},{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.44449999928474426},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.44339999556541443},{"id":"https://openalex.org/C2988145974","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Mobile apps","level":2,"score":0.4043000042438507},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.396699994802475},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3813999891281128},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.34549999237060547},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.34360000491142273},{"id":"https://openalex.org/C2779473830","wikidata":"https://www.wikidata.org/wiki/Q1540899","display_name":"MEDLINE","level":2,"score":0.33739998936653137},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.3269999921321869},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.32199999690055847},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.32030001282691956},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.30709999799728394},{"id":"https://openalex.org/C202645933","wikidata":"https://www.wikidata.org/wiki/Q4930","display_name":"eHealth","level":3,"score":0.3043000102043152},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2786000072956085},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.27810001373291016},{"id":"https://openalex.org/C61904560","wikidata":"https://www.wikidata.org/wiki/Q1148359","display_name":"Grey literature","level":3,"score":0.26989999413490295},{"id":"https://openalex.org/C3017977704","wikidata":"https://www.wikidata.org/wiki/Q18745135","display_name":"Health data","level":3,"score":0.26579999923706055},{"id":"https://openalex.org/C60952562","wikidata":"https://www.wikidata.org/wiki/Q6887246","display_name":"Mobile technology","level":3,"score":0.26339998841285706},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.25760000944137573},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.25529998540878296}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tps-isa67132.2025.00064","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tps-isa67132.2025.00064","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 7th International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W2005004672","https://openalex.org/W2148778157","https://openalex.org/W2302332383","https://openalex.org/W2583068338","https://openalex.org/W2700868952","https://openalex.org/W2734634119","https://openalex.org/W2741406550","https://openalex.org/W2773113124","https://openalex.org/W2800964897","https://openalex.org/W2914348794","https://openalex.org/W2954563606","https://openalex.org/W2995562658","https://openalex.org/W3024846856","https://openalex.org/W3111836710","https://openalex.org/W3118615836","https://openalex.org/W3118981323","https://openalex.org/W3209023411","https://openalex.org/W3211737488","https://openalex.org/W3217066851","https://openalex.org/W4200447731","https://openalex.org/W4213423749","https://openalex.org/W4282937429","https://openalex.org/W4288084784","https://openalex.org/W4322393963","https://openalex.org/W4322496724","https://openalex.org/W4385486578","https://openalex.org/W4386280775","https://openalex.org/W4386472748","https://openalex.org/W4390575185","https://openalex.org/W4391100203","https://openalex.org/W4391237786","https://openalex.org/W4399939250","https://openalex.org/W4401568637","https://openalex.org/W4403870189","https://openalex.org/W4408685158","https://openalex.org/W4411034393"],"related_works":[],"abstract_inverted_index":{"Mobile":[0],"health":[1,144,259,315],"(mHealth)":[2],"applications":[3],"are":[4,55,305],"increasingly":[5],"integrated":[6],"into":[7,131],"healthcare,":[8],"offering":[9],"convenient":[10],"access":[11],"to":[12,35,57,107,135,175,309],"healthcare":[13],"services,":[14],"patient":[15,19,28,59],"status":[16],"monitoring,":[17],"and":[18,51,70,87,98,110,116,216,231,282,289],"education.":[20],"However,":[21,229],"their":[22,122,136],"rapid":[23],"adoption":[24],"is":[25,33],"associated":[26],"with":[27,118,141,194,255],"information":[29,287],"security":[30,41,124,206,224,246,268,295,313],"concerns.":[31],"It":[32],"desired":[34],"have":[36],"a":[37,45,75],"comprehensive":[38,76],"assessment":[39],"on":[40,91,121,213,278],"features":[42,187,233,247,285],"implemented":[43,123,188,237],"in":[44,81,182,189,197,248,297],"wide":[46],"range":[47],"of":[48,172,267,314],"mHealth":[49,92,191,249,298],"apps":[50,140,148,154,192,201,210,221,250,256,275,299],"determine":[52],"whether":[53],"they":[54],"sufficient":[56,308],"protect":[58],"information.":[60],"By":[61],"following":[62],"the":[63,101,111,166,312],"Preferred":[64],"Reporting":[65],"Items":[66],"for":[67,89,227,286],"Systematic":[68],"Reviews":[69],"Meta":[71],"Analyses":[72],"(PRISMA)":[73],"guidelines,":[74],"literature":[77],"search":[78],"was":[79],"conducted":[80],"three":[82,132,167],"databases:":[83],"PubMed,":[84],"IEEE":[85],"Xplore,":[86],"CINAHL,":[88],"articles":[90,103,113,128,162,179],"app":[93],"development":[94],"published":[95],"between":[96],"2010":[97],"2024.":[99],"All":[100],"retrieved":[102,164],"were":[104,114,129,163,180,234],"screened":[105],"according":[106,134,174],"selection":[108,176],"criteria,":[109,177],"selected":[112,127],"analyzed":[115],"summarized,":[117],"specific":[119],"focus":[120],"features.":[125],"The":[126],"arranged":[130],"categories":[133],"data":[137,145,195,253,260],"sensitivity:":[138],"1)":[139],"no":[142,205],"personal":[143,151],"collected;":[146],"2)":[147],"collecting":[149,155],"non-sensitive":[150],"data;":[152],"3)":[153],"sensitive":[156,258],"medical":[157],"data.":[158,316],"In":[159],"total,":[160],"7,907":[161],"from":[165],"databases.":[168],"After":[169],"two":[170],"rounds":[171],"screening":[173],"213":[178],"included":[181],"this":[183],"systematic":[184,242],"review.":[185],"Security":[186],"these":[190],"consistent":[193],"sensitivity":[196],"general.":[198],"Category":[199,208,219],"1":[200],"had":[202],"minimal":[203],"or":[204],"measures.":[207],"2":[209],"relied":[211],"heavily":[212],"basic":[214,279],"authentication":[215],"encryption":[217],"methods.":[218],"3":[220],"demonstrated":[222],"stronger":[223,263],"protection,":[225],"particularly":[226],"confidentiality.":[228],"integrity":[230,288],"availability":[232,290],"less":[235],"consistently":[236],"across":[238],"all":[239],"categories.":[240],"This":[241],"review":[243],"showed":[244],"that":[245],"vary":[251],"by":[252],"sensitivity,":[254],"handling":[257],"generally":[261],"having":[262],"protections.":[264],"While":[265],"reporting":[266],"measures":[269],"has":[270],"improved":[271],"over":[272],"time,":[273],"most":[274],"still":[276],"rely":[277],"safeguard":[280],"approaches,":[281],"more":[283],"robust":[284],"remain":[291],"limited.":[292],"Therefore,":[293],"current":[294],"implementation":[296],"provided":[300],"necessary":[301],"confidentiality":[302],"protection":[303],"but":[304],"not":[306],"yet":[307],"fully":[310],"ensure":[311]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-03-04T00:00:00"}