Dataset Information

Mobile health and privacy: cross sectional study.

ABSTRACT:

Objectives

To investigate whether and what user data are collected by health related mobile applications (mHealth apps), to characterise the privacy conduct of all the available mHealth apps on Google Play, and to gauge the associated risks to privacy.

Design

Cross sectional study SETTING: Health related apps developed for the Android mobile platform, available in the Google Play store in Australia and belonging to the medical and health and fitness categories.

Participants

Users of 20 991 mHealth apps (8074 medical and 12 917 health and fitness found in the Google Play store: in-depth analysis was done on 15 838 apps that did not require a download or subscription fee compared with 8468 baseline non-mHealth apps.

Main outcome measures

Primary outcomes were characterisation of the data collection operations in the apps code and of the data transmissions in the apps traffic; analysis of the primary recipients for each type of user data; presence of adverts and trackers in the app traffic; audit of the app privacy policy and compliance of the privacy conduct with the policy; and analysis of complaints in negative app reviews.

Results

88.0% (n=18 472) of mHealth apps included code that could potentially collect user data. 3.9% (n=616) of apps transmitted user information in their traffic. Most data collection operations in apps code and data transmissions in apps traffic involved external service providers (third parties). The top 50 third parties were responsible for most of the data collection operations in app code and data transmissions in app traffic (68.0% (2140), collectively). 23.0% (724) of user data transmissions occurred on insecure communication protocols. 28.1% (5903) of apps provided no privacy policies, whereas 47.0% (1479) of user data transmissions complied with the privacy policy. 1.3% (3609) of user reviews raised concerns about privacy.

Conclusions

This analysis found serious problems with privacy and inconsistent privacy practices in mHealth apps. Clinicians should be aware of these and articulate them to patients when determining the benefits and risks of mHealth apps.

SUBMITTER: Tangari G

PROVIDER: S-EPMC8207561 | biostudies-literature |

REPOSITORIES: biostudies-literature

ACCESS DATA

Similar Datasets

Project description:BackgroundMobile eHealth apps are important tools in personal health care management. The Patient Journey app was developed to inform patients with musculoskeletal disorders during their perioperative period. The app contains timely information, video exercises, and functional tasks. Although the Patient Journey app and other health apps are widely used, little research is available on how patients appreciate these apps.ObjectiveThe primary aim of this study was to evaluate the user-friendliness of the Patient Journey app in terms of its usability and the attitudes of users toward the app. The secondary aim was to evaluate positive and negative user experiences.MethodsA web-based questionnaire was sent to 2114 patients scheduled for surgery for a musculoskeletal disorder. Primary outcomes were usability (measured with the System Usability Scale) and user attitudes regarding the Patient Journey app (assessed with the second part of the eHealth Impact Questionnaire). The secondary outcomes were evaluated with multiple choice questions and open-ended questions, which were analyzed via inductive thematic content analyses.ResultsOf the 940 patients who responded, 526 used the Patient Journey app. The usability of the app was high (System Usability Scale: median 85.0, IQR 72.5-92.5), and users had a positive attitude toward the Information and Presentation provided via the app (eHealth Impact Questionnaire: median 78.0, IQR 68.8-84.4). The app did not adequately improve the users' confidence in discussing health with others (eHealth Impact Questionnaire: median 63.9, IQR 50.0-75.0) or motivation to manage health (eHealth Impact Questionnaire: median 61.1, IQR 55.6-72.2). Three core themes emerged regarding positive and negative user experiences: (1) content and information, (2) expectations and experiences, and (3) technical performance. Users experienced timely information and instructions positively and found that the app prepared and guided them optimally through the perioperative period. Negative user experiences were overly optimistic information, scarcely presented information about pain (medication), lack of reference data, insufficient information regarding clinical course deviations and complications, and lack of interaction with clinicians.ConclusionsThe Patient Journey app is a usable, informative, and presentable tool to inform patients with musculoskeletal disorders during their perioperative period. The qualitative analyses identified aspects that can further improve the user experiences of the app.

Project description:BackgroundDespite the importance of the privacy and confidentiality of patients' information, mobile health (mHealth) apps can raise the risk of violating users' privacy and confidentiality. Research has shown that many apps provide an insecure infrastructure and that security is not a priority for developers.ObjectiveThis study aims to develop and validate a comprehensive tool to be considered by developers for assessing the security and privacy of mHealth apps.MethodsA literature search was performed to identify papers on app development, and those papers reporting criteria for the security and privacy of mHealth were assessed. The criteria were extracted using content analysis and presented to experts. An expert panel was held for determining the categories and subcategories of the criteria according to meaning, repetition, and overlap; impact scores were also measured. Quantitative and qualitative methods were used for validating the criteria. The validity and reliability of the instrument were calculated to present an assessment instrument.ResultsThe search strategy identified 8190 papers, of which 33 (0.4%) were deemed eligible. A total of 218 criteria were extracted based on the literature search; of these, 119 (54.6%) criteria were removed as duplicates and 10 (4.6%) were deemed irrelevant to the security or privacy of mHealth apps. The remaining 89 (40.8%) criteria were presented to the expert panel. After calculating impact scores, the content validity ratio (CVR), and the content validity index (CVI), 63 (70.8%) criteria were confirmed. The mean CVR and CVI of the instrument were 0.72 and 0.86, respectively. The criteria were grouped into 8 categories: authentication and authorization, access management, security, data storage, integrity, encryption and decryption, privacy, and privacy policy content.ConclusionsThe proposed comprehensive criteria can be used as a guide for app designers, developers, and even researchers. The criteria and the countermeasures presented in this study can be considered to improve the privacy and security of mHealth apps before releasing the apps into the market. Regulators are recommended to consider an established standard using such criteria for the accreditation process, since the available self-certification of developers is not reliable enough.

Project description:BackgroundPrivacy has always been a concern, especially in the health domain. The proliferation of mobile health (mHealth) apps has led to a large amount of sensitive data being generated. Some authors have performed privacy assessments of mHealth apps. They have evaluated diverse privacy components; however, different authors have used different criteria for their assessments.ObjectiveThis scoping review aims to understand how privacy is assessed for mHealth apps, focusing on the components, scales, criteria, and scoring methods used. A simple taxonomy to categorize the privacy assessments of mHealth apps based on component evaluation is also proposed.MethodsWe followed the methodology defined by Arksey and O'Malley to conduct a scoping review. Included studies were categorized based on the privacy component, which was assessed using the proposed taxonomy.ResultsThe database searches retrieved a total of 710 citations-24 of them met the defined selection criteria, and data were extracted from them. Even though the inclusion criteria considered articles published since 2009, all the studies that were ultimately included were published from 2014 onward. Although 12 papers out of 24 (50%) analyzed only privacy, 8 (33%) analyzed both privacy and security. Moreover, 4 papers (17%) analyzed full apps, with privacy being just part of the assessment. The evaluation criteria used by authors were heterogeneous and were based on their experience, the literature, and/or existing legal frameworks. Regarding the set of items used for the assessments, each article defined a different one. Items included app permissions, analysis of the destination, analysis of the content of communications, study of the privacy policy, use of remote storage, and existence of a password to access the app, among many others. Most of the included studies provided a scoring method that enables the comparison of privacy among apps.ConclusionsThe privacy assessment of mHealth apps is a complex task, as the criteria used by different authors for their evaluations are very heterogeneous. Although some studies about privacy assessment have been conducted, a very large set of items to evaluate privacy has been used up until now. In-app information and privacy policies are primarily utilized by the scientific community to extract privacy information from mHealth apps. The creation of a scale based on more objective criteria is a desirable step forward for privacy assessment in the future.

Project description:BackgroundMobile health apps have the potential to motivate people to adopt healthier behavior, but many fail to maintain this behavior over time. However, it has been suggested that long-term adherence can be improved by personalizing the proposed interventions. Based on the literature, we created a conceptual framework for selecting appropriate functionalities according to the user's profile.ObjectiveThis cross-sectional study aims to investigate if the relationships linking functionalities and profiles proposed in our conceptual framework are confirmed by user preferences.MethodsA web-based questionnaire comprising several sections was developed to determine the mobile app functionalities most likely to promote healthier behavior. First, participants completed questionnaires to define the user profile (Big Five Inventory-10, Hexad Scale, and perception of the social norm using dimensions of the Theory of Planned Behavior). Second, participants were asked to select the 5 functionalities they considered to be the most relevant to motivate healthier behavior and to evaluate them on a score ranging from 0 to 100. We will perform logistic regressions with the selected functionalities as dependent variables and with the 3 profile scales as predictors to allow us to understand the effect of the participants' scores on each of the 3 profile scales on the 5 selected functionalities. In addition, we will perform logistic ordinal regressions with the motivation score of the functionalities chosen as dependent variables and with scores of the 3 profile scales as predictors to determine whether the scores on the different profile scales predict the functionality score.ResultsData collection was conducted between July and December 2021. Analysis of responses began in January 2022, with the publication of results expected by the end of 2022.ConclusionsThis study will allow us to validate our conceptual model by defining the preferred functionalities according to user profiles.International registered report identifier (irrid)RR1-10.2196/38603.

Project description:BackgroundMobile health (mHealth) provides a new opportunity for disease prediction and patient health self-management. However, privacy problems in mHealth have drawn significant attention to patients' online health information disclosure and to the possibility that privacy concerns may hinder mHealth development.ObjectivePrivacy calculus theory (PCT) has been widely used to understand personal information disclosure behaviors with the basic assumption of a rational and linear decision-making process. However, cognitive behavior processes are complex and mutual. In an attempt to gain a fuller understanding of information disclosure behavior, we further optimize a PCT-based information disclosure model by identifying the mutual relationship between costs (privacy concerns) and benefits. Social support, which has been proven to be a distinct and significant disclosure benefit of mHealth, was chosen as the representative benefit of information disclosure.MethodsWe examine a structural equation model that incorporates privacy concerns, health information disclosure intention in mHealth, and social support from mHealth, all at the individual level.ResultsA validated questionnaire was completed by 253 randomly selected participants. The result indicated that perceived health information sensitivity positively enhances patients' privacy concern (beta path coefficient 0.505, P<.001), and higher privacy concern levels will decrease their health information disclosure intention (beta path coefficient -0.338, P<.001). Various individual characteristics influence perceived health information sensitivity in different ways. One dimension of social support, informational support, negatively moderates the effect of the relationship between perceived health information sensitivity and privacy concerns (beta path coefficient -0.171, P=.092) and the effect of the relationship between privacy concerns and health information disclosure intention (beta path coefficient -0.105, P=.092). However, another dimension, emotional support, has no direct moderation effect on the relationship between privacy concerns and health information disclosure intention.ConclusionsThe results indicate that social support can be regarded as a disutility reducer. That is, on the one hand, it reduces patients' privacy concerns; on the other hand, it also reduces the negative impact of privacy concerns on information disclosure intention. Moreover, the moderation effect of social support is partially supported. Informational support, one dimension of social support, is significant (beta path coefficient -0.171, P=.092), while the other dimension, emotional support, is not significant (beta path coefficient -0.137, P=.146), in mHealth. Furthermore, the results are different among patients with different individual characteristics. This study also provides specific theoretical and practical implications to enhance the development of mHealth.

Project description:BACKGROUND:Despite many efforts, maternal mortality remains a major burden in most developing countries. Mobile health (mHealth) has the potential to improve access to obstetric care through apps that help patients and providers. OBJECTIVE:This study aimed to use mHealth to provide antenatal care (ANC) to 1446 pregnant women in a rural area in Madagascar and evaluate the quality of ANC provided by an mHealth system designed to change the behaviors of providers and patients. METHODS:We included 1446 women who attended ANC visits in rural Madagascar from 2015 to 2019 using an mHealth system called Pregnancy and Newborn Diagnostic Assessment (PANDA). This cross-sectional study used data from different participants, with information collected over several years, to analyze the outputs related to the quality of ANC over time. Specifically, we examined the timing of the first ANC visit, the relationship between the visit duration and the risk factors among pregnant women, and the number of ANC visits per woman. RESULTS:Following the implementation of the mHealth system in 2015, we observed that women started to come earlier for their first ANC visit; more women attended their first ANC visit in the second trimester of pregnancy in 2019 than in the previous years (P<.001). In 2019, fewer women attended their first ANC visit in the third trimester (57/277, 20.6%) than in 2015 (147/343, 42.9%). There were statistically significant associations between the ANC visit durations and the risk factors, including age (>35 years; 25.0 min, 95% CI 24.0-25.9), educational level (longer visit for women with lower than primary education and for women who attended university and shorter for women with primary school-level education; 40.7 min, 95% CI 30.2-51.3 and 25.3 min, 95% CI 24.4-26.3 vs 23.3 min, 95% CI 22.9-23.8; P=.001), experience of domestic violence during pregnancy, gravidity, parity, infectious diseases (HIV, malaria, and syphilis), and level of anemia. Statistically significant associations were observed for all quality indicator variables. We observed a statistically significant increase in the number of ANC visits per woman over time from 2015 to 2017; the number of ANC visits per woman then became stable after the third year of implementing the PANDA mHealth system. CONCLUSIONS:This study shows the potential of an mHealth system to improve the quality of ANC, change provider behavior by standardizing ANC visits, and change patient behavior by increasing the willingness to return for subsequent visits and encouraging ANC attendance early in pregnancy. As this is an exploratory study, further studies are necessary to better understand how mHealth can change behavior and identify the conditions required for behavioral changes to persist over time.