We kindly ask you to read the following information and privacy statement regarding this study. If you agree,
please consent to the individual statements at the end of this form.
Subject of the Study
This study examines the usability of a new Android permission system and compares it to state-of-the-art
systems used in Android and iOS.
Study Process
The study consists of the following steps and is conducted online:
- Filling out the first questionnaire
- Perform the first task on a randomly selected system (Android, iOS, or prototype)
- Filling out the second questionnaire
- Perform the second task on a randomly selected system (Android, iOS, or prototype)
- Filling out the third questionnaire
Duration and Compensation
Participation in the study is expected to take about 15 minutes. No compensation will be provided.
Possible Benefit of the Study
The benefit to society is that, building on our study, researchers and smartphone operating system developers can create better permission systems tailored to users’ needs. This can enhance data protection and privacy for a broader segment of the population.
Risks Associated with Participation
Participants in this study will not be exposed to any risks beyond those associated with everyday life.
Privacy Policy
Data processing for this study is conducted in accordance with the data protection provisions of the General Data Protection Regulation (GDPR) and the Hessian Data Protection and Freedom of Information Act (HDSIG). The data will be used exclusively for the purposes described in the informed consent form.
The following data will be collected as part of this study:
- General affinity for technology interaction
- General privacy concerns
- System usability assessment of the tested system
- Understanding of the tested system
- Interaction with the tested system (time to decide and decision outcome)
The following personal data is collected:
- Demographics (age group, gender)
- Daily smartphone screen time by group
- Primary personal smartphone operating system
Confidentiality
All data collected as part of this study is confidential and will be used only in pseudonymized form. Demographic information, such as age or gender, does not allow for any unambiguous identification of you as an individual. At no point during the study will we ask you to provide your name or any other identifying information.
Storage
The data collected in this study is collected in pseudonymized form, meaning it is collected in a way that does not allow your identity to be identified. It is stored on a server owned by TUDa. All participants are assigned a pseudonym (a random number). In all research materials, participants are identified only by this pseudonym and never by their real names. There is a possibility that the data may be used in a scientific publication. In the event of publication, the collected data will be made available to the public in pseudonymized form. The collected data will be published exclusively in pseudonymized form.
Study Withdrawal
Within three months after completing this study you can contact us by email (dbreuer@seemoo.tu-darmstadt.de) and request the deletion of your data. Please note down the following token and reference this in your deletion request: 424391. We can only fulfill your request with this token as we do not store your name or data to unambiguously identify you in our data set.
Voluntary Participation & Rights of Research Participants
Your participation in this study is voluntary. You are free to withdraw from the study at any time and thereby revoke this consent without suffering any adverse consequences. If you withdraw from the study, no data about you will be stored, and all data collected about you to date will be destroyed. You have the right to access the personal data we hold about you and, where appropriate, to request that it be corrected or deleted. You also have the right to restrict processing, the right to object to processing, and the right to data portability in a commonly used, structured, and machine-readable format. In the event of a dispute, you have the right to file a complaint with the Hessian Data Protection Commissioner (see address below).
