If This Context Then That Concern: Exploring users' concerns with IFTTT applets
This research is significant for smart home users and platform developers, as it highlights how contextual factors influence end-users' perception of privacy and security risks in trigger-action programming.
This study investigated how well end-users assess risks in IFTTT applets by surveying 386 participants on 49 smart-home applets. It found that prompting users to consider different usage contexts increased their awareness of associated risks and concerns.
End users are increasingly using trigger-action platforms like, If-This-Then-That (IFTTT) to create applets to connect smart home devices and services. However, there are inherent risks in using such applets -- even non-malicious ones -- as sensitive information may leak through their use in certain contexts (e.g., where the device is located, who can observe the resultant action). This work aims to understand how well end users can assess this risk. We do so by exploring users' concerns with using IFTTT applets and more importantly if and how those concerns change based on different contextual factors. Through a Mechanical Turk survey of 386 participants on 49 smart-home IFTTT applets, we found that nudging the participants to think about different usage contexts led them to think deeper about the associated risks and raise their concerns. Qualitative analysis reveals that participants had a nuanced understanding of contextual factors and how these factors could lead to leakage of sensitive data and allow unauthorized access to applets and data.