Latest draft as of March 8, 2013.. Please contact me at jenking [at] ischool.berkeley.edu for the most current version. This is an update to the Sept. 2012 version cited in the Federal Trade Commission's Mobile Privacy Disclosures Report.
This paper is currently under review for publication - please do not quote without permission.
This material is based upon work supported by the U.S. Department of Homeland Security, under grant award #2006-CS-001-000001, and the National Institute of Standards and Technology, under grant award #60NANB1D0127, under the auspices of the Institute for Information Infrastructure Protection (I3P) research program. The I3P is managed by Dartmouth College. The views and conclusions contained in this document are those of the authors and should not be interpreted as necessarily representing the official policies, either expressed or implied, of the U.S. Department of Homeland Security, the I3P, or Dartmouth College.