Eyeing Your Exposure: Quantifying and Controlling Information Sharing for Improved Privacy
A large body of research has focused on disclosure policies for controlling information release in social sharing (e.g., location-based) applications. However, less work has considered how exposed these policies actually leave users; i.e., to what extent are disclosures in compliance with these policies actually being made? For instance, consider a disclosure policy granting the user's co-workers access to their location during work hours. The user might feel that this policy appropriately controls their exposure, but may feel differently if they learned that their boss was accessing their location every 5 minutes. In addition to specifying who has access to personal information, users need a way to quantify, interpret, and control the extent to which this data is shared.