Facebook users' app use contradicts their stated security concerns, study finds
Although most Facebook users claim to be very uncomfortable with how third-party apps use their personal information, their actual behavior doesnt reflect this concern, a new study by School of Information researchers has discovered.
As Facebook and other social networking websites grow in popularity and become an archive of personal information, they are ripe targets for marketers or hackers. Managing privacy online is increasingly important and increasingly complicated.
Facebook presents a particular challenge, since many of its apps are provided by outside developers, including games like Mafia Wars and FarmVille. Users install 20 million Facebook apps every day, making their privacy vulnerable not just to Facebooks privacy practices, but also to the privacy practices of numerous additional companies. In 2010, The Wall Street Journal revealed that several of the most popular apps had shared users personal information with advertisers, in violation of Facebooks privacy policies.
More than ninety percent of the studys respondents said they were uncomfortable with how Facebook apps access and use their personal information, once researchers explained it to them. Users actual behavior didnt reflect their privacy concerns, though perhaps because the way third-party apps interact with Facebook and what information the apps have access to can be complicated or confusing.
The study was conducted by I School doctoral student Jen King, visiting researcher Airi Lampinen, and 2011 MIMS graduate Alex Smolen. King will be presenting the research findings at next weeks Symposium On Usable Privacy and Security in Pittsburgh, Pennsylvania.
Researchers initially suspected that expert users the minority who actually understood Facebooks data-sharing practices would be better at managing the online privacy of third-party apps. But the researchers were surprised to find that this wasnt true; the more knowledgeable users made the same mistakes as everyone else.
Although Facebook offers a complicated grid of privacy settings for its own data use, there are no similar controls for third-party apps; users only option is not to use the app. In our study, nobody appeared to have a consistent strategy for managing application privacy not even the most knowledgeable users, said study author Jen King.
One group stood out as both more knowledgeable and more concerned about online privacy: people who had been personally hurt. This group included people whose information had been inadvertently disclosed to someone they didnt want to see it like a boss or a parent or those who had had private or embarrassing information or photos posted online and wanted remove them.
On-screen warning messages or privacy policies dont seem to make a difference, either, since users who had read them neither knew more, acted differently, nor felt more concerned about apps than users who had not reported reading these statements, according to the study.