From Discovery to Decisions: Archetypal Journeys of Mobile App Users and Their Implications on Privacy

Paper Title

From Discovery to Decisions: Archetypal Journeys of Mobile App Users and Their Implications on Privacy

Publication Info

• Topic area: Mobile app user behavior and privacy decision-making
• Keywords: Mobile privacy, user journey, app permissions, privacy calculus, contextual integrity, Android, user behavior, privacy strategies, app discovery, permission granting

Background and Problem

• Problem / challenge: Existing research on mobile app permissions focuses on isolated factors like interface design or rationale messages, without considering how decisions evolve across the entire user journey. This fragmented approach overlooks how earlier stages influence permission outcomes.
• Significance: Understanding the sequential nature of privacy decisions can improve the design of privacy tools and interventions, ensuring they align with real-world user behavior and decision-making processes.
• Motivation and related work: Prior studies have explored demographic influences, cultural contexts, and the framing of permission prompts but have not examined how these elements interact across the stages of app adoption. Theoretical models like Privacy Calculus and Contextual Integrity provide partial insights but lack a sequential perspective.

Solution

• Proposed approach: The study introduces a sequential, path-dependent framework for understanding mobile app permission decisions, based on user journey mapping.
• Novelty:
  1. Reconceptualizes permission granting as a multi-stage, cumulative process rather than a discrete event.
  2. Identifies four archetypal user journeys (e.g., recommended apps, mandatory apps) that illustrate distinct pathways to permission decisions.
  3. Proposes a process-oriented framework that integrates Privacy Calculus and Contextual Integrity theories to explain how decisions evolve across stages.
• Procedure and key techniques:
  • Conducted semi-structured interviews with 19 U.S. Android users.
  • Used thematic analysis to map the user journey across four stages: app discovery, exploration and selection, installation, and permission granting.
  • Identified archetypal journeys and privacy strategies through qualitative coding and analysis.

Results

• Concrete findings:
  • Identified four sequential stages in the user journey: app discovery, exploration and selection, installation, and permission granting.
  • Found that early cues (e.g., peer recommendations, app type) significantly shape later privacy decisions.
  • Users employed diverse privacy strategies, such as relying on brand trust, peer recommendations, or financial incentives.
• Advantage over baselines: The study integrates fragmented insights into a coherent framework, revealing how early-stage influences precondition permission outcomes, which prior prompt-focused studies overlooked.
• Experiments / evaluation:
  • Conducted 19 interviews with Android users, focusing on their app adoption and permission-granting behaviors.
  • Used thematic analysis to identify patterns and archetypes in user journeys.
  • Evaluated findings against theoretical models like Privacy Calculus and Contextual Integrity.
• Limitations and future work:
  • Relies on self-reported data, which may involve recall bias.
  • Focused on U.S. Android users, limiting generalizability to other platforms or cultural contexts.
  • Future work should include longitudinal studies, larger samples, and experimental validation of proposed design interventions.

Summary

This study reframes mobile app permission decisions as a sequential, path-dependent process, spanning app discovery, exploration, installation, and permission granting. By identifying archetypal user journeys (e.g., peer-recommended apps, mandatory apps), it demonstrates how early cues shape privacy decisions long before the permission prompt. The findings integrate Privacy Calculus and Contextual Integrity theories into a process-oriented framework, offering actionable insights for designing privacy tools that align with real-world user behavior. Future research should explore cross-cultural contexts and evaluate journey-aligned interventions.