<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Is My Information Private? Geo-Privacy in the World of Social Media</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>B. Kar</string-name>
          <email>bandana.kar@usm.edu</email>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>R. Ghose</string-name>
          <email>rghose@uwm.edu</email>
          <xref ref-type="aff" rid="aff2">2</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>5051</institution>
          ,
          <addr-line>Hattiesburg, MS - 39406</addr-line>
          ,
          <country country="US">USA</country>
        </aff>
        <aff id="aff1">
          <label>1</label>
          <institution>Department of Geography &amp; Geology, University of Southern Mississippi</institution>
          ,
          <addr-line>118 College Drive</addr-line>
          ,
          <country country="US">USA</country>
        </aff>
        <aff id="aff2">
          <label>2</label>
          <institution>Department of Geography, University of Wisconsin-Milwaukee</institution>
          ,
          <addr-line>P.O.Box 413, Milwaukee, WI - 53201</addr-line>
          ,
          <country country="US">USA</country>
        </aff>
      </contrib-group>
      <abstract>
        <p>1. Abstract Privacy has always been a public concern. It can be dated back to “media privacy” of 1361 that was enacted to protect people from peeping toms in England. In 19th century, privacy became a hot issue with the arrival of modern photography and printing press that enabled easy reporting of personal information and pictures, automated data processing to catalog citizens during World War II, and record keeping Systems in the U.S. These actions led to the enactment of a number of privacy policies, specifically, focusing on data protection - mis-use of data and/or malicious access of data by unauthorized persons. In this era of the Internet, ubiquitous computing combined with the growth of the geo-spatial and the Information and Communication Technology industries has made it possible for anyone to access personal and location information of another person anytime and anywhere. For instance, GeoAPI of Twitter (a social media service) can help track the movement of a person over space and time. Despite having regulatory policies, it is possible to extract location information of a person by using VGI (Volunteered Geographic Information) and CGI (Contributed Geographic Information) available from social media sites. This study explores the extent to which location information obtained from social media sites are reliable and useful and are influenced by an individual's concern and knowledge of privacy.</p>
      </abstract>
      <kwd-group>
        <kwd>Social media</kwd>
        <kwd>Geo-Privacy</kwd>
        <kwd>VGI</kwd>
        <kwd>CGI</kwd>
        <kwd>Accuracy</kwd>
        <kwd>Location Information</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>2. Introduction</title>
      <p>The revolutionary changes in geo-spatial technologies (e.g. Global Positioning System (GPS),
ultra-wide-band radio) have enabled the collection and generation of a large amount of geospatial data
at different levels of accuracy, coverage and cost. The growth of the Information and Communication
Technologies (ICT) (e.g. mobile devices, cell towers, the Internet) has led to the emergence of
location-based services (LBS) (Google Latitude and Google Street View) and social media sites (e.g.
Twitter and Facebook). Using spatial data, these services and sites provide information about an
individual’s or a vehicle’s location accurately and precisely. Given the uncertainty about how this
information can violate a person’s privacy, this study explores the extent to which people’s
knowledge and concern of privacy influences their decision to share location information through
VGI (Volunteered Geographic Information) and CGI (Contributed Geographic Information).</p>
      <p>
        Location-based services and social media sites singularly do not violate personal information.
However, by coordinating location information with other types of information, such as an
individual’s address, these services can provide personal information to a third party, thereby leading
to location privacy violation. Location privacy though is an unclear concept, it is defined as “the
ability to prevent other parties from learning one’s current or past location” or “the ability of an
individual to move in public space with the expectation that under normal circumstances their location
will not be systematically and secretly recorded for later use”
        <xref ref-type="bibr" rid="ref3 ref4 ref6">(Beresford and Stajano 2003; Blumberg
and Eckersley 2009)</xref>
        .
      </p>
      <p>
        Personal privacy - “the quality or state of being apart from company or observation” or
“freedom from unauthorized intrusion” (Webster 2010) - has received extensive legal attention with
the publication of the 1890 Harvard Law Review article “the right to be let alone”
        <xref ref-type="bibr" rid="ref21">(Warren and
Brandeis 1890)</xref>
        . It is also protected by the U.S. Constitution’s Fourth Amendment that prohibits
government observation or intrusion of one’s home. In contrast, despite numerous legal battles
        <xref ref-type="bibr" rid="ref20">(e.g.
U.S. vs Skinner 2012, Boring vs Google 2010)</xref>
        , location privacy did not receive equivalent attention
until 2013 and 2014 when a number of bills were introduced in the U.S. Congress for the Location
Privacy Protection Act, Geolocation Privacy and Surveillance Act, Electronic Communications
Privacy Act Amendments Act, and Online Communications and Geolocation Protection Act
        <xref ref-type="bibr" rid="ref17">(Pomfret
2013)</xref>
        . These acts in essence prohibit (1) unlawful attainment and disclosing of geo-location
information to government agencies, and (2) companies from obtaining and disclosing geo-location
information from electronic communication media without users’ consent
        <xref ref-type="bibr" rid="ref10 ref17">(Pomfret 2013, GPS.gov
2014)</xref>
        .
      </p>
      <p>
        Though the legal underpinning exists, it is possible to harvest spatial information from
crowdsourced geographic information (VGI and CGI)
        <xref ref-type="bibr" rid="ref11">(Harvey 2013)</xref>
        . As
        <xref ref-type="bibr" rid="ref11">Harvey (2013)</xref>
        pointed out, from
ethical and legal standpoint, VGI requires users to opt-in or volunteer to share their information (e.g.
OpenStreetMap) based on their explicit understanding of how the information will be used as opposed
to CGI in which users may opt-out from sharing their information, but it can still be collected (e.g.
cell phone tracking). Thus, the users’ attitude towards volunteering information and protecting
privacy can influence the accuracy of the spatial information obtained from VGI and CGI. Given the
wide spread usage of crowd-sourced data and growing concern of public about privacy, this study
attempts to explore the following questions identified by other researchers (1) how accurate is the
location information obtained from VGI vs CGI and what percentage of VGI and CGI data are fudged
and obliterated? (2) how much an individual’s concern and knowledge of privacy influences their
sharing of location information on social media?
        <xref ref-type="bibr" rid="ref11 ref13">(Harvey 2013, Krumm 2008)</xref>
        .
2.1 Background
      </p>
      <p>
        Privacy has been a public concern since 1361 when “media privacy” was enacted to protect
people from peeping toms in England
        <xref ref-type="bibr" rid="ref14">(Langheinrich 2013)</xref>
        . However, it was not a hot issue until the
arrival of modern photography and printing press in the 19th century, which enabled easy reporting of
personal information and pictures, the automated data processing to catalog citizens during World
War II, and the record keeping Systems in the U.S.
        <xref ref-type="bibr" rid="ref14">(Langheinrich 2013)</xref>
        . These actions motivated
people to protect their privacy, especially, access to personal information, and led to the enactment of
a number of privacy policies focusing on data protection, i.e., mis-use of data and/or malicious access
of data by unauthorized persons.
      </p>
      <p>
        Like privacy, surveillance is not a new concept. The first surveillance instrument - Bentham’s
Panopticon - a building within which all occupants could be tracked from one vista point - was
designed by Samuel Bentham in 1785
        <xref ref-type="bibr" rid="ref7">(Dobson and Fisher 2007)</xref>
        . This was followed by the second
surveillance instrument a.k.a. “Big-Brother” - a closed-circuit television (CCTV) to observe public
spaces
        <xref ref-type="bibr" rid="ref7">(Dobson and Fisher 2007)</xref>
        . The third panopticon, built on geo-spatial technologies and ICT, is
more intrusive and enables sharing of personal information with a larger community
        <xref ref-type="bibr" rid="ref7">(Dobson and
Fisher 2007)</xref>
        . Because of its ability to track an individual’s location information,
        <xref ref-type="bibr" rid="ref6">Dobson and Fisher
(2003)</xref>
        termed this practice as “geoslavery”. In this era of the Internet, ubiquitous computing
combined with the growth of the geo-spatial and the ICT industries has made it possible for the
pervasive presence of the third panopticon. For instance, GeoAPI of Twitter (a social media service)
can help track the movement of a person over space and time.
      </p>
      <p>Location privacy will not be a problem if people were not tempted to share their location
information on social media sites and LBS. Given our dependency on ICT and the recent popularity of
location-based services (e.g., smart phones, Twitter’s location API, Google Latitude, etc.), in addition
to the legal communities, actions must be taken by users, developers and providers of these
technologies and services to protect privacy and location privacy. Therefore, additional to legal
protection, a number of computational countermeasures have been taken to protect personal and
location information of a user.</p>
      <p>
        The users of location aware services may use self-regulatory techniques, such as, providing
limited personal information, adjusting privacy settings, limiting access to certain people, disabling or
refusing to use applications that may lead to losing privacy or provide limited privacy protection, and
not opting to share certain information, to protect their privacy
        <xref ref-type="bibr" rid="ref5">(Cottrill 2011)</xref>
        . Likewise, a number of
approaches are currently available for users to protect their privacy
        <xref ref-type="bibr" rid="ref20">(Tsai et al. 2010)</xref>
        : 1) Blacklist:
blocks specific individuals from accessing a user’s personal information; 2) Friends Only: allows
access to only individuals listed as friends; 3) Granularity: restricts the spatial resolution at which a
user’s location information will be available to others thereby reducing accuracy of location
information; 4) Group: allows a user to create a group of members to have access to his/her location
information; 5) Invisible: prohibits anyone from accessing a user’s location information; 6)
Locationbased rules: allows a user to identify locations belonging to a specific category (e.g. work or
entertainment) for which location information will be available; 7) Network: allows users to release
their location information to all members belonging to the users’ network; 8) Per-request permissions:
allows users to release location data to certain parties who have requested permission to access these
data; and 9) Time-based rules: allows users to decide the duration within which their location data
may be available to others.
      </p>
      <p>
        To protect users’ privacy, developers use a number of computation approaches: 1)
Anonymity: a user’s location information is same as other users; 2) Obfuscation: the accuracy of
location information is reduced by introducing noise; 3) Aggregation: a user’s location information is
aggregated with other users’ location data; 4) Encryption: the true location information is fudged
and/or encrypted
        <xref ref-type="bibr" rid="ref13 ref15 ref16 ref18 ref19 ref3 ref6">(Beresford and Stajano 2003, Leitner and Curtis 2006, Popa et al. 2011, Saponas et
al. 2006, Krumm 2008)</xref>
        .
      </p>
      <p>For these approaches to be successful users must be aware of their presence, and users must
know that their privacy is/can be lost because third parties can access their personal and location
information. A user must also take appropriate actions to prevent information sharing. In any case,
there is still the possibility of extracting location information from social media sites that have
significant potential for real life applications (e.g. crisis mapping). This raises the question, how much
crowd-sourced geographic information is reliable and useful.</p>
    </sec>
    <sec id="sec-2">
      <title>3. Methodology</title>
      <p>
        The study-site will be the University of Southern Mississippi, which is located in the City of
Hattiesburg, Mississippi. System architecture similar to the one presented in Stefanidis et al. (2011)
will be used to extract information from only one social media site: Twitter. Using twitter’s native
API and Python, both textual and graphic data will be extracted for two weeks duration for specific
hash tags (e.g., USM, Hattiesburg, and University). In addition to extracting real time data, data for
the same duration will be purchased from the third party vendor (Gnip) that provides access to twitter
feeds to increase data set size. By parsing the extracted data, the spatial information will be obtained
(this will include coordinates of the locations where the tweets have been posted). Likewise, from
textual and graphic data, geo-tagged information will be extracted for the study site and duration. By
geo-coding the location information, a point map will be created, which will be overlaid on the
University’s location information layer. Finally, the spatial distribution of error will be computed, and
total error and error variance based on spatial and temporal distribution will be computed to
understand the extent of data fudging done to protect location information. Finally, the survey used in
the study exploring knowledge of location privacy
        <xref ref-type="bibr" rid="ref12">(Kar et al. 2013)</xref>
        will be introduced to on-campus
students and their user names will be used (after receiving their consent) to extract tweets from these
students for the same duration to explore the last question. The spatial distribution of error will also be
visualized to explore the impact of location where tweets are posted on accuracy.
      </p>
    </sec>
    <sec id="sec-3">
      <title>Findings and Contributions</title>
      <p>We expect that the quality of the data is influenced by the situation rather than public’s
concern of privacy. For instance, during a disaster, people are motivated to share accurate location
information that is relevant to the disaster instead of their own personal space. We also expect that
population of specific age group will be more concerned about their own privacy and protecting
personal information. For instance, older generation (35+ years) will be more concerned about taking
steps to protect their own privacy at any given time.</p>
      <p>
        In the web 2.0 era, citizens a.k.a. “human sensors” provide valuable and timely information
about the post-disaster landscape that can be used in emergency response and crisis mapping
        <xref ref-type="bibr" rid="ref2 ref22 ref8 ref9">(Goodchild 2007, Zook et al., 2010, Bengtsson et al., 2011)</xref>
        . Given the crowd-sourced data are
available at real time and at fine resolution than other data sets, they can be used as reference data to
assess accuracy of other data sets, e.g. remote sensing data. However, the usage of crowd-sourced
data can be influenced by the quality of the data. The answers to the research questions identified in
this study will make three contributions. First, it will show if public’s concern and knowledge of
privacy influences the quality of crowd-sourced information, which is one of the future research
questions identified by
        <xref ref-type="bibr" rid="ref9">Goodchild (2010)</xref>
        in the field of Geographic Information Science (GIScience).
Second, it will contribute to the research on data quality of crowd-sourced information and
implications for real-life applications
        <xref ref-type="bibr" rid="ref16">(Lease 2011)</xref>
        . Finally, by investigating the privacy concerns of
public, it will contribute to the research in location privacy, especially, what triggers people to care
about location privacy
        <xref ref-type="bibr" rid="ref13">(Krumm 2008)</xref>
        .
      </p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          <string-name>
            <surname>Authority</surname>
            <given-names>F</given-names>
          </string-name>
          ,
          <year>1973</year>
          ,
          <article-title>Stating the obvious: An interdisciplinary approach</article-title>
          .
          <source>Journal of Entirely Predictable Results</source>
          ,
          <volume>63</volume>
          (
          <issue>2</issue>
          ):
          <fpage>1037</fpage>
          -
          <lpage>1068</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          <string-name>
            <surname>Bengtsson</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>X.</given-names>
            <surname>Lu</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Thorson</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Garfield</surname>
          </string-name>
          ,
          <source>J. von Schreeb</source>
          ,
          <year>2011</year>
          ,
          <article-title>Improved response to disasters and outbreaks by tracking population movements with mobile phone network data: a post-earthquake geospatial study in Haiti</article-title>
          .
          <source>PLOS Medicine</source>
          ,
          <volume>8</volume>
          (
          <issue>8</issue>
          ): DOI: 10.1371/journal.pmed.
          <volume>1001083</volume>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          <string-name>
            <surname>Beresford</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          , and
          <string-name>
            <given-names>F.</given-names>
            <surname>Stajano</surname>
          </string-name>
          ,
          <year>2003</year>
          ,
          <article-title>Location privacy in pervasive computing</article-title>
          .
          <source>IEEE Pervasive Computing</source>
          ,
          <volume>2</volume>
          (
          <issue>1</issue>
          ):
          <fpage>46</fpage>
          -
          <lpage>55</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          <string-name>
            <surname>Blumberg</surname>
            ,
            <given-names>A. J.</given-names>
          </string-name>
          , and
          <string-name>
            <given-names>P.</given-names>
            <surname>Eckersley</surname>
          </string-name>
          ,
          <year>2009</year>
          ,
          <article-title>On locational privacy, and how to avoid losing it forever</article-title>
          . Electronic Frontier Foundation. http://www.eff.org/files/eff-locational-privacy.
          <source>pdf (last accessed 15 May</source>
          <year>2014</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          <string-name>
            <surname>Cottrill</surname>
            ,
            <given-names>C. D.</given-names>
          </string-name>
          ,
          <year>2011</year>
          , Location privacy: who protects?
          <source>URISA Journal</source>
          ,
          <volume>23</volume>
          (
          <issue>2</issue>
          ):
          <fpage>49</fpage>
          -
          <lpage>59</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          <string-name>
            <surname>Dobson</surname>
            ,
            <given-names>Jerome E.</given-names>
          </string-name>
          , and P. Fisher,
          <year>2003</year>
          , Geoslavery.
          <source>IEEE Technology and Society Magazine</source>
          ,
          <fpage>47</fpage>
          -
          <lpage>52</lpage>
          . https://msu.edu/~kg/874/geoslavery.
          <source>pdf (last accessed 5 June</source>
          <year>2014</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          <string-name>
            <surname>Dobson</surname>
            ,
            <given-names>Jerome E.</given-names>
          </string-name>
          , and P. Fisher,
          <year>2007</year>
          ,
          <article-title>The panopticon's changing geography</article-title>
          .
          <source>Geographical Review</source>
          ,
          <volume>97</volume>
          (
          <issue>3</issue>
          ):
          <fpage>27</fpage>
          -
          <lpage>323</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          <string-name>
            <surname>Goodchild</surname>
            ,
            <given-names>M. F</given-names>
          </string-name>
          ,
          <year>2007</year>
          ,
          <article-title>Citizens as sensors: the world of volunteered geography</article-title>
          .
          <source>GeoJournal</source>
          ,
          <volume>69</volume>
          (
          <issue>4</issue>
          ):
          <fpage>211</fpage>
          -
          <lpage>221</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          <string-name>
            <surname>Goodchild</surname>
            ,
            <given-names>M. F</given-names>
          </string-name>
          ,
          <year>2010</year>
          ,
          <article-title>Twenty years of progress: GIScience in 2010</article-title>
          .
          <source>Journal of Spatial Information Science</source>
          ,
          <volume>1</volume>
          :
          <fpage>3</fpage>
          -
          <lpage>20</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          GPS.gov,
          <year>2014</year>
          , Geolocation Privacy Legislation. http://www.gps.gov/policy/legislation/gps-act
          <source>/ (last accessed 15 May</source>
          <year>2014</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          <string-name>
            <surname>Harvey</surname>
            ,
            <given-names>F.</given-names>
          </string-name>
          ,
          <year>2013</year>
          ,
          <article-title>To volunteer or to contribute locational information? Towards truth in labeling for Crowdsourced Geographic Information</article-title>
          . In: D.
          <string-name>
            <surname>Sui</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          <string-name>
            <surname>Elwood</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          <article-title>Goodchild (eds), Crowdsourcing Geographic Knowledge: Volunteered Geographic Information (VGI) in Theory and Practice</article-title>
          ,
          <string-name>
            <surname>NY</surname>
          </string-name>
          , USA,
          <fpage>31</fpage>
          -
          <lpage>43</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          <string-name>
            <surname>Kar</surname>
            ,
            <given-names>B.</given-names>
          </string-name>
          ,
          <article-title>and</article-title>
          <string-name>
            <given-names>R. C.</given-names>
            <surname>Crowsey</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J. J.</given-names>
            <surname>Zale</surname>
          </string-name>
          ,
          <year>2013</year>
          ,
          <article-title>The myth of location privacy in the U.S.: surveyed attitude vs. current practices</article-title>
          .
          <source>The Professional Geographer</source>
          ,
          <volume>65</volume>
          (
          <issue>1</issue>
          ):
          <fpage>47</fpage>
          -
          <lpage>64</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          <string-name>
            <surname>Krumm</surname>
            ,
            <given-names>J.</given-names>
          </string-name>
          ,
          <year>2008</year>
          ,
          <article-title>A survey of computational location privacy</article-title>
          .
          <source>Personal and Ubiquitous Computing</source>
          ,
          <volume>13</volume>
          (
          <issue>6</issue>
          ):
          <fpage>391</fpage>
          -
          <lpage>399</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          <string-name>
            <surname>Langheinrich</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          ,
          <year>2013</year>
          ,
          <article-title>Privacy by design - principles of privacy-aware ubiquitous systems</article-title>
          . http://cs.gmu.edu/~jpsousa/classes/699/papers/privacy%20Langheinrich.
          <source>pdf (last accessed 5 June</source>
          <year>2014</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          <string-name>
            <surname>Leitner</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          ,
          <article-title>and</article-title>
          <string-name>
            <given-names>A.</given-names>
            <surname>Curtis</surname>
          </string-name>
          ,
          <year>2006</year>
          ,
          <string-name>
            <surname>A</surname>
          </string-name>
          <article-title>First step towards a framework for presenting the location of confidential point data on maps-results of an empirical perceptual study</article-title>
          .
          <source>International Journal of Geographical Information Science</source>
          ,
          <volume>20</volume>
          (
          <issue>7</issue>
          ):
          <fpage>813</fpage>
          -
          <lpage>22</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          <string-name>
            <given-names>M.</given-names>
            <surname>Lease</surname>
          </string-name>
          ,
          <year>2011</year>
          ,
          <article-title>On quality control and machine learning in crowdsourcing</article-title>
          .
          <source>Association for the Advancement of Artificial Intelligence</source>
          . https://www.ischool.utexas.edu/~ml/papers/lease-hcomp11.
          <source>pdf (last accessed 15 July</source>
          <year>2014</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref17">
        <mixed-citation>
          <string-name>
            <surname>Pomfret</surname>
            ,
            <given-names>K. D.</given-names>
          </string-name>
          ,
          <year>2013</year>
          ,
          <article-title>Latitudes and attitudes: Zooming in on geospatial data, privacy and the law in the digital age. Centre for Spatial Law</article-title>
          and Policy, http://www.spatiallaw.com/Uploads/Latitudes_and_Attitudes.
          <source>pdf (last accessed 15 May</source>
          <year>2014</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref18">
        <mixed-citation>
          <string-name>
            <surname>Popa</surname>
            ,
            <given-names>R. A.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>A. J.</given-names>
            <surname>Blumberg</surname>
          </string-name>
          ,
          <string-name>
            <given-names>H.</given-names>
            <surname>Balakrishnan</surname>
          </string-name>
          , and
          <string-name>
            <given-names>F. H.</given-names>
            <surname>Li</surname>
          </string-name>
          ,
          <year>2011</year>
          ,
          <article-title>Privacy and accountability for location-based aggregate statistics</article-title>
          .
          <source>CCS'11.</source>
        </mixed-citation>
      </ref>
      <ref id="ref19">
        <mixed-citation>
          <string-name>
            <surname>Saponas</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>J.</given-names>
            <surname>Lester</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Hartung</surname>
          </string-name>
          , and
          <string-name>
            <given-names>T.</given-names>
            <surname>Kohno</surname>
          </string-name>
          ,
          <year>2006</year>
          ,
          <article-title>Devices that tell on you: The Nike+iPod sport kit</article-title>
          .
          <source>Technical Report 2006-12-06</source>
          , University of Washington.
        </mixed-citation>
      </ref>
      <ref id="ref20">
        <mixed-citation>
          <string-name>
            <surname>Tsai</surname>
            ,
            <given-names>J. Y.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>P. G.</given-names>
            <surname>Kelley</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L. F.</given-names>
            <surname>Cranor</surname>
          </string-name>
          ,
          <string-name>
            <given-names>N.</given-names>
            <surname>Sadeh</surname>
          </string-name>
          ,
          <year>2010</year>
          ,
          <article-title>Location-sharing technologies: Privacy risks and controls</article-title>
          . http://cups.cs.cmu.edu/LBSprivacy/files/TsaiKelleyCranorSadeh_2009.
          <article-title>pdf (last accessed 5 June 2014</article-title>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref21">
        <mixed-citation>
          <string-name>
            <surname>Warren</surname>
            ,
            <given-names>S. D.</given-names>
          </string-name>
          and
          <string-name>
            <given-names>L. D.</given-names>
            <surname>Brandeis</surname>
          </string-name>
          ,
          <year>1890</year>
          . The Right to Privacy.
          <source>Harvard Law Review</source>
          ,
          <volume>4</volume>
          (
          <issue>5</issue>
          ):
          <fpage>193</fpage>
          -
          <lpage>220</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref22">
        <mixed-citation>
          <string-name>
            <surname>Zook</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Graham</surname>
          </string-name>
          ,
          <string-name>
            <given-names>T.</given-names>
            <surname>Shelton</surname>
          </string-name>
          and
          <string-name>
            <given-names>S.</given-names>
            <surname>Gorman</surname>
          </string-name>
          ,
          <year>2010</year>
          ,
          <article-title>Volunteered geographic information and crowdsourcing disaster relief: a case study of the Haitian Earthquake</article-title>
          .
          <source>World Medical &amp; Health Policy</source>
          ,
          <volume>2</volume>
          :
          <fpage>7</fpage>
          -
          <lpage>33</lpage>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>