Dataset Information

Assessing the Privacy of mHealth Apps for Self-Tracking: Heuristic Evaluation Approach.

ABSTRACT: BACKGROUND:The recent proliferation of self-tracking technologies has allowed individuals to generate significant quantities of data about their lifestyle. These data can be used to support health interventions and monitor outcomes. However, these data are often stored and processed by vendors who have commercial motivations, and thus, they may not be treated with the sensitivity with which other medical data are treated. As sensors and apps that enable self-tracking continue to become more sophisticated, the privacy implications become more severe in turn. However, methods for systematically identifying privacy issues in such apps are currently lacking. OBJECTIVE:The objective of our study was to understand how current mass-market apps perform with respect to privacy. We did this by introducing a set of heuristics for evaluating privacy characteristics of self-tracking services. METHODS:Using our heuristics, we conducted an analysis of 64 popular self-tracking services to determine the extent to which the services satisfy various dimensions of privacy. We then used descriptive statistics and statistical models to explore whether any particular categories of an app perform better than others in terms of privacy. RESULTS:We found that the majority of services examined failed to provide users with full access to their own data, did not acquire sufficient consent for the use of the data, or inadequately extended controls over disclosures to third parties. Furthermore, the type of app, in terms of the category of data collected, was not a useful predictor of its privacy. However, we found that apps that collected health-related data (eg, exercise and weight) performed worse for privacy than those designed for other types of self-tracking. CONCLUSIONS:Our study draws attention to the poor performance of current self-tracking technologies in terms of privacy, motivating the need for standards that can ensure that future self-tracking apps are stronger with respect to upholding users' privacy. Our heuristic evaluation method supports the retrospective evaluation of privacy in self-tracking apps and can be used as a prescriptive framework to achieve privacy-by-design in future apps.

SUBMITTER: Hutton L

PROVIDER: S-EPMC6231850 | biostudies-literature | 2018 Oct

REPOSITORIES: biostudies-literature

ACCESS DATA

Publications

Assessing the Privacy of mHealth Apps for Self-Tracking: Heuristic Evaluation Approach.

Hutton Luke L Price Blaine A BA Kelly Ryan R McCormick Ciaran C Bandara Arosha K AK Hatzakis Tally T Meadows Maureen M Nuseibeh Bashar B

JMIR mHealth and uHealth 20181022 10

<h4>Background</h4>The recent proliferation of self-tracking technologies has allowed individuals to generate significant quantities of data about their lifestyle. These data can be used to support health interventions and monitor outcomes. However, these data are often stored and processed by vendors who have commercial motivations, and thus, they may not be treated with the sensitivity with which other medical data are treated. As sensors and apps that enable self-tracking continue to become m ...[more]

PMID: 30348623

Similar Datasets

Project description:BackgroundBreast cancer is a widespread disease, and its incidence is rapidly increasing in the Middle East and North Africa region. With the increasing availability of smartphone apps for various health purposes, breast cancer apps have emerged as tools for raising awareness, providing support, and empowering women affected by this disease. These apps offer many features, including information on breast cancer risk factors, self-examination guides, appointment reminders, and community support groups or hotlines. Using apps raises the risk of privacy and security issues, and we hope that examining these features of the apps will contribute to the understanding of how technology can be used to improve these apps and provide insights for future development and improvement of breast cancer apps.ObjectiveThis study aims to critically review the quality, privacy, and security of breast cancer apps available to Arabic speakers.MethodsSimilar to several recent studies, we used a systematic search for apps available in Google Play and Apple App stores using both the web interface and the built-in native stores installed on smartphones. The search was conducted in mid-December 2022 in Arabic using the following keywords: سرطان الثدي - فحص سرطان الثدي - علاج سرطان الثدي - مرض سرطان الثدي - أعراض سرطان الثدي - فحص الثدي (breast cancer, breast cancer treatment, breast cancer disease, breast cancer symptoms, breast cancer screening, and breast test). These preidentified search terms are based on earlier work concerning the top searched breast cancer topics by Arabic speakers through Google's search engine. We excluded apps that did not have an Arabic interface, were developed for non-Arabic speakers, were paid, needed a subscription, or were directed toward health care workers. The Mobile App Rating Scale was used to evaluate the quality of the apps concerning their engagement, functionality, aesthetics, and information. A risk score was calculated for the apps to determine their security risk factors.ResultsOnly 9 apps were included, with most (6/9, 67%) being supported by advertisements and categorized as informational. Overall, the apps had low numbers of downloads (>10 to >1000). The majority of the included apps (8/9, 89%) requested dangerous access permissions, including access to storage, media files, and the camera. The average security score of the included apps was 3.22, while only 2 apps provided information about data security and privacy. The included apps achieved an overall average quality score of 3.27, with individual dimension scores of 4.75 for functionality, 3.04 for information, 3.00 for aesthetics, and 2.32 for engagement.ConclusionsThe limited availability of breast cancer apps available to Arabic speakers should be a call to action and prompt health care organizations and developers to join forces and collaboratively develop information-rich, usable, functional, engaging, and secure apps.

Project description:BackgroundUsability is a key factor affecting the acceptance of mobile health applications (mHealth apps) for elderly individuals, but traditional usability evaluation methods may not be suitable for use in this population because of aging barriers. The objectives of this study were to identify, explore, and summarize the current state of the literature on the usability evaluation of mHealth apps for older adults and to incorporate these methods into the appropriate evaluation stage.MethodsElectronic searches were conducted in 10 databases. Inclusion criteria were articles focused on the usability evaluation of mHealth apps designed for older adults. The included studies were classified according to the mHealth app usability evaluation framework, and the suitability of evaluation methods for use among the elderly was analyzed.ResultsNinety-six articles met the inclusion criteria. Research activity increased steeply after 2013 (n = 92). Satisfaction (n = 74) and learnability (n = 60) were the most frequently evaluated critical measures, while memorability (n = 13) was the least evaluated. The ratios of satisfaction, learnability, operability, and understandability measures were significantly related to the different stages of evaluation (P < 0.05). The methods used for usability evaluation were questionnaire (n = 68), interview (n = 36), concurrent thinking aloud (n = 25), performance metrics (n = 25), behavioral observation log (n = 14), screen recording (n = 3), eye tracking (n = 1), retrospective thinking aloud (n = 1), and feedback log (n = 1). Thirty-two studies developed their own evaluation tool to assess unique design features for elderly individuals.ConclusionIn the past five years, the number of studies in the field of usability evaluation of mHealth apps for the elderly has increased rapidly. The mHealth apps are often used as an auxiliary means of self-management to help the elderly manage their wellness and disease. According to the three stages of the mHealth app usability evaluation framework, the critical measures and evaluation methods are inconsistent. Future research should focus on selecting specific critical measures relevant to aging characteristics and adapting usability evaluation methods to elderly individuals by improving traditional tools, introducing automated evaluation tools and optimizing evaluation processes.

Project description:BackgroundThe popularization of mobile health (mHealth) apps for public health or medical care purposes has transformed human life substantially, improving lifestyle behaviors and chronic condition management.ObjectiveThis review aimed to identify behavior change techniques (BCTs) commonly used in mHealth, assess their effectiveness based on the evidence reported in interventions and reviews to highlight the most appropriate techniques to design an optimal strategy to improve adherence to data reporting, and provide recommendations for future interventions and research.MethodsWe performed a systematic review of studies published between 2010 and 2021 in relevant scientific databases to identify and analyze mHealth interventions using BCTs that evaluated their effectiveness in terms of user adherence. Search terms included a mix of general (eg, data, information, and adherence), computer science (eg, mHealth and BCTs), and medicine (eg, personalized medicine) terms.ResultsThis systematic review included 24 studies and revealed that the most frequently used BCTs in the studies were feedback and monitoring (n=20), goals and planning (n=14), associations (n=14), shaping knowledge (n=12), and personalization (n=7). However, we found mixed effectiveness of the techniques in mHealth outcomes, having more effective than ineffective outcomes in the evaluation of apps implementing techniques from the feedback and monitoring, goals and planning, associations, and personalization categories, but we could not infer causality with the results and suggest that there is still a need to improve the use of these and many common BCTs for better outcomes.ConclusionsPersonalization, associations, and goals and planning techniques were the most used BCTs in effective trials regarding adherence to mHealth apps. However, they are not necessarily the most effective since there are studies that use these techniques and do not report significant results in the proposed objectives; there is a notable overlap of BCTs within implemented app components, suggesting a need to better understand best practices for applying (a combination of) such techniques and to obtain details on the specific BCTs used in mHealth interventions. Future research should focus on studies with longer follow-up periods to determine the effectiveness of mHealth interventions on behavior change to overcome the limited evidence in the current literature, which has mostly small-sized and single-arm experiments with a short follow-up period.

Project description:BACKGROUND:Many adolescents and young adults with chronic illness or disability often fail to develop the self-management skills necessary to independently handle medical and self-management routines. In light of these needs, we are developing iMHere 2.0 (Interactive Mobile Health and Rehabilitation), a mobile health (mHealth) system to support a self-management program. OBJECTIVE:Our objective was to gather data from persons with brain and spinal cord anomalies (BSA) and their caregivers to better understand how mHealth would be most helpful in supporting them to proactively manage daily self-care routines and to access medical care as needed. The specific purpose was not only to gather feedback and to gain increased insight into the design of the new version of iMHere, but also to gather perspectives of new groups, namely adolescents as young as 12 years and their parents and/or caregivers. METHODS:Our project employed focus group sessions and surveys to collect data from participants with BSA, as well as their caregivers. A total of six focus group sessions were conducted on four separate occasions until the data gathered reached saturation. The objectives of our focus group sessions were to better understand ways to develop mHealth systems to support self-management, to promote independence, to motivate long-term system use, and to prevent medical problems that lead to hospitalizations and emergency room visits for youth and young adults with BSA. RESULTS:A total of 16 youth and young adults with BSA and 11 caregivers participated in the sessions. Within and among our groups, the following five overarching themes emerged from the data: (1) make it easy, (2) engage, (3) educate and prepare, (4) motivate and support, and (5) personalize. Participants shared their perspectives and detailed information about mHealth apps that would be important for independence in self-care and self-management. CONCLUSIONS:Our findings suggest that most individuals keep their mobile phones with them at all times and typically use a mobile phone for social media, music, photos, and texting. Our qualitative analysis indicates that youth and young adults with BSA, as well as their caregivers, acknowledge the importance of being actively engaged in developing and using mHealth apps that monitor and manage their health care needs. Information gleaned from these focus group sessions and surveys have provided data to refine the iMHere 2.0 mHealth prototype platform that we have developed.

Project description:BackgroundWith the development of mobile health (mHealth), chronic disease management apps have brought not only the possibility of reducing the burden of chronic diseases but also huge privacy risks to patients' health data.ObjectiveThe purpose of the study was to analyze the extent to which chronic disease management apps in China comply with the Personal Information Security Specification (PI Specification).MethodsThe compliance of 45 popular chronic disease management apps was evaluated from the perspective of the information life cycle. To conduct a fine-grained evaluation, a scale based on the PI Specification was developed. Finally, 6 level 1 indicators, 22 level 2 indicators, and 61 level 3 indicators were defined.ResultsThere were 33/45 apps (73%) with a privacy policy, and the average score of these apps was 40.4 out of 100. Items of level 1 indicators with high scores included general characteristics (mean 51.9% [SD 28.1%]), information collection and use (mean 51.1% [SD 36.7%]), and information sharing and transfer (mean 50.3% [SD 33.5%]). Information storage and protection had the lowest compliance with PI Specification (mean 29.4% [SD 32.4%]). Few personal information (PI) controllers have stated how to handle security incidents, including security incident reporting (7/33, 21%), security incident notification (10/33, 30%), and commitment to bear corresponding legal responsibility for PI security incidents (1/33, 3%). The performance of apps in the stage of information destruction (mean 31.8% [SD 40.0%]) was poor, and only 21% (7/33) apps would notify third parties to promptly delete PI after individuals cancelled their accounts. Moreover, the scoring rate for rights of PI subjects is generally low (mean 31.2% [SD 35.5%]), especially for obtaining copies of PI (15%) and responding to requests (25%).ConclusionsAlthough most chronic disease management apps had a privacy policy, the total compliance rate of the policy content was low, especially in the stage of information storage and protection. Thus, the field has a long way to go with regard to compliance around personal privacy protection in China.

Project description:BackgroundMobile health has become a major vehicle of support for people living with diabetes. Accordingly, the availability of mobile apps for diabetes has been steadily increasing. Most of the previous reviews of diabetes apps have focused on the apps' features and their alignment with clinical guidelines. However, there is a lack of knowledge on the actual compliance of diabetes apps with privacy and data security guidelines.ObjectiveThe aim of this study was to assess the levels of privacy of mobile apps for diabetes to contribute to the raising of awareness of privacy issues for app users, developers, and governmental data protection regulators.MethodsWe developed a semiautomatic app search module capable of retrieving Android apps' privacy-related information, particularly the dangerous permissions required by apps, with the aim of analyzing privacy aspects related to diabetes apps. Following the research selection criteria, the original 882 apps were narrowed down to 497 apps that were included in the analysis.ResultsApproximately 60% of the analyzed diabetes apps requested potentially dangerous permissions, which pose a significant risk to users' data privacy. In addition, 28.4% (141/497) of the apps did not provide a website for their privacy policy. Moreover, it was found that 40.0% (199/497) of the apps contained advertising, and some apps that claimed not to contain advertisements actually did. Ninety-five percent of the apps were free, and those belonging to the "medical" and "health and fitness" categories were the most popular. However, app users do not always realize that the free apps' business model is largely based on advertising and, consequently, on sharing or selling their private data, either directly or indirectly, to unknown third parties.ConclusionsThe aforementioned findings confirm the necessity of educating patients and health care providers and raising their awareness regarding the privacy aspects of diabetes apps. Therefore, this research recommends properly and comprehensively training users, ensuring that governments and regulatory bodies enforce strict data protection laws, devising much tougher security policies and protocols in Android and in the Google Play Store, and implicating and supervising all stakeholders in the apps' development process.

Project description:BackgroundPrivacy has always been a concern, especially in the health domain. The proliferation of mobile health (mHealth) apps has led to a large amount of sensitive data being generated. Some authors have performed privacy assessments of mHealth apps. They have evaluated diverse privacy components; however, different authors have used different criteria for their assessments.ObjectiveThis scoping review aims to understand how privacy is assessed for mHealth apps, focusing on the components, scales, criteria, and scoring methods used. A simple taxonomy to categorize the privacy assessments of mHealth apps based on component evaluation is also proposed.MethodsWe followed the methodology defined by Arksey and O'Malley to conduct a scoping review. Included studies were categorized based on the privacy component, which was assessed using the proposed taxonomy.ResultsThe database searches retrieved a total of 710 citations-24 of them met the defined selection criteria, and data were extracted from them. Even though the inclusion criteria considered articles published since 2009, all the studies that were ultimately included were published from 2014 onward. Although 12 papers out of 24 (50%) analyzed only privacy, 8 (33%) analyzed both privacy and security. Moreover, 4 papers (17%) analyzed full apps, with privacy being just part of the assessment. The evaluation criteria used by authors were heterogeneous and were based on their experience, the literature, and/or existing legal frameworks. Regarding the set of items used for the assessments, each article defined a different one. Items included app permissions, analysis of the destination, analysis of the content of communications, study of the privacy policy, use of remote storage, and existence of a password to access the app, among many others. Most of the included studies provided a scoring method that enables the comparison of privacy among apps.ConclusionsThe privacy assessment of mHealth apps is a complex task, as the criteria used by different authors for their evaluations are very heterogeneous. Although some studies about privacy assessment have been conducted, a very large set of items to evaluate privacy has been used up until now. In-app information and privacy policies are primarily utilized by the scientific community to extract privacy information from mHealth apps. The creation of a scale based on more objective criteria is a desirable step forward for privacy assessment in the future.

Dataset Information

Assessing the Privacy of mHealth Apps for Self-Tracking: Heuristic Evaluation Approach.

Publications

Assessing the Privacy of mHealth Apps for Self-Tracking: Heuristic Evaluation Approach.

Similar Datasets

OmicsDI is part of the ELIXIR infrastructure

Tweets