{"id":"https://openalex.org/W7155066809","doi":"https://doi.org/10.48550/arxiv.2604.18552","title":"Do Privacy Policies Match with the Logs? An Empirical Study of Privacy Disclosure in Android Application Logs","display_name":"Do Privacy Policies Match with the Logs? An Empirical Study of Privacy Disclosure in Android Application Logs","publication_year":2026,"publication_date":"2026-04-20","ids":{"openalex":"https://openalex.org/W7155066809","doi":"https://doi.org/10.48550/arxiv.2604.18552"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.18552","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.18552","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.18552","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134198547","display_name":"Zhiyuan Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Zhiyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134186979","display_name":"Love Jayesh Ahir","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ahir, Love Jayesh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126534502","display_name":"Ahmad Suleiman","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Suleiman, Ahmad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035956071","display_name":"Kundi Yao","orcid":"https://orcid.org/0000-0002-3756-4673"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yao, Kundi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134170984","display_name":"Yiming Tang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tang, Yiming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134152851","display_name":"Weiyi Shang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shang, Weiyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5134169868","display_name":"Daqing Hou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hou, Daqing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.7771999835968018,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.7771999835968018,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.02459999918937683,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.024399999529123306,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7565000057220459},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.644599974155426},{"id":"https://openalex.org/keywords/privacy-policy","display_name":"Privacy policy","score":0.616100013256073},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.5552999973297119},{"id":"https://openalex.org/keywords/logging","display_name":"Logging","score":0.4596000015735626},{"id":"https://openalex.org/keywords/personally-identifiable-information","display_name":"Personally identifiable information","score":0.45080000162124634},{"id":"https://openalex.org/keywords/privacy-software","display_name":"Privacy software","score":0.43970000743865967},{"id":"https://openalex.org/keywords/privacy-by-design","display_name":"Privacy by Design","score":0.36980000138282776}],"concepts":[{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7565000057220459},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.720300018787384},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.6513000130653381},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.644599974155426},{"id":"https://openalex.org/C102938260","wikidata":"https://www.wikidata.org/wiki/Q1999831","display_name":"Privacy policy","level":3,"score":0.616100013256073},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.5552999973297119},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5465999841690063},{"id":"https://openalex.org/C125620115","wikidata":"https://www.wikidata.org/wiki/Q845249","display_name":"Logging","level":2,"score":0.4596000015735626},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.45080000162124634},{"id":"https://openalex.org/C509729295","wikidata":"https://www.wikidata.org/wiki/Q7246032","display_name":"Privacy software","level":3,"score":0.43970000743865967},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.36980000138282776},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.36820000410079956},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.3434999883174896},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.3190000057220459},{"id":"https://openalex.org/C2988045736","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android app","level":3,"score":0.31869998574256897},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.31439998745918274},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.30660000443458557},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.28760001063346863},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.287200003862381},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2777999937534332},{"id":"https://openalex.org/C2988145974","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Mobile apps","level":2,"score":0.26820001006126404}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.18552","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.18552","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.18552","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.18552","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7098140716552734,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Privacy":[0],"policies":[1,35,148],"are":[2],"intended":[3],"to":[4],"inform":[5],"users":[6],"about":[7],"how":[8],"software":[9],"systems":[10],"collect":[11],"and":[12,36,138],"handle":[13],"data,":[14],"yet":[15],"they":[16],"often":[17],"remain":[18,93],"vague":[19],"or":[20,96,151],"incomplete.":[21],"This":[22],"paper":[23],"presents":[24],"an":[25],"empirical":[26],"study":[27],"of":[28,90,116,129,154],"patterns":[29],"in":[30,43,111,123],"log-related":[31,91],"statements":[32,92],"within":[33],"privacy":[34,40,68,109,147],"their":[37,124],"alignment":[38,133],"with":[39,114,162],"disclosures":[41],"observed":[42,107],"Android":[44,50],"application":[45,112],"logs.":[46],"We":[47,105],"analyzed":[48],"1,000":[49],"apps":[51,117],"across":[52],"multiple":[53],"categories,":[54],"generating":[55],"86,836,964":[56],"log":[57],"entries.":[58],"Our":[59],"findings":[60,143],"reveal":[61],"that":[62,78,145],"while":[63],"most":[64,81],"applications":[65,130],"(88.0%)":[66],"provide":[67,149],"policies,":[69],"only":[70,127],"28.5%":[71],"explicitly":[72],"mention":[73],"logging":[74,155,164],"practices.":[75],"Among":[76],"those":[77],"reference":[79],"logging,":[80],"clearly":[82],"describe":[83],"what":[84],"information":[85,120],"is":[86],"logged;":[87],"however,":[88],"27.7%":[89],"overly":[94],"simplistic":[95],"vague,":[97],"offering":[98],"limited":[99],"insight":[100],"into":[101],"actual":[102,139,163],"data":[103],"collection.":[104],"further":[106],"widespread":[108],"leakages":[110],"logs,":[113],"67.6%":[115],"leaking":[118],"sensitive":[119],"not":[121,160],"mentioned":[122],"policies.":[125],"Alarmingly,":[126],"0.4%":[128],"demonstrated":[131],"consistent":[132],"between":[134],"declared":[135],"policy":[136],"contents":[137],"logged":[140],"data.":[141],"These":[142],"highlight":[144],"current":[146],"incomplete":[150],"ambiguous":[152],"descriptions":[153],"practices,":[156],"which":[157],"frequently":[158],"do":[159],"align":[161],"behaviors.":[165]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-22T00:00:00"}