A Characterization of Digital Native Approaches To Mobile Privacy and Security

Abstract

Despite their familiarity with the digital, so-called 'digital natives' are not tech-savvy, particularly with respect to privacy and security. In this study we characterize this problem by looking at a cohort of South African students. We employ a web-based survey of 100 students, supplemented by in-depth interviews with 10 additional students. In both cases we inquired about, and observed knowledge of permissions, encryption and application installation practices. Our findings show that most students (80%) do not look for or understand permissions or encryption, and use location-based services unsafely. Based on these results we argue that digital natives lack the technical skills and understanding to properly engage with mobile privacy and security. We further argue that this generation has been so over-exposed to mobile requests that violate their privacy and security that they have become desensitized and their definition of privacy and security has changed. Lastly, we discuss the implications of our findings for higher education institutions, policy, and mobile application design.