Data privacy in ride-sharing services
From an analysis of common practices to improvement of user awareness
Publication date
2023-01-01
Document type
Konferenzbeitrag
Author
Organisational unit
Conference
27th Nordic Conference, NordSec 2022 ; Reykjavic, Iceland ; November 30 – December 2, 2022
Publisher
Springer
Series or journal
Lecture notes in computer science
Book title
Secure IT systems
First page
20
Last page
39
Peer-reviewed
✅
Part of the university bibliography
✅
Language
English
Abstract
Individuals are frequently confronted with privacy-related decisions under uncertainty especially in online contexts. The resulting privacy concerns are a decisive factor for individuals to (not) use online services. In order to support individuals to make more informed decisions, we assess the current state of practice of certain online services. This analysis is focused on ride-sharing and includes popular services in Germany, Austria, and Switzerland and we investigate how they handle user data. The results show that services include a wide-ranging set of personal data and lack standardization. Furthermore, they offer limited privacy-related features. Based on this analysis, we developed a Transparency Enhancing Technology in the form of a browser extension that informs users about data practices of the services at the time of data disclosure. In addition to this, we conducted a scenario-based online experiment with a representative sample to evaluate the usability of our tool and its effect on users’ concerns and behavior. Results show significant improvements in awareness and decision reflection with limited decrease in disclosure rates of personal data.
Version
Published version
Access right on openHSU
Metadata only access