Patchiness of mucosal inflammation in treated ulcerative colitis: a prospective study.

C. Bernstein,F. Shanahan,P. Anton,W. Weinstein

DOI: https://doi.org/10.1016/S0016-5107(95)70097-8

IF: 10.396

1995-09-01

Gastrointestinal Endoscopy

Abstract:

What problem does this paper attempt to address?

Mobile health and privacy: cross sectional study

Gioacchino Tangari,Muhammad Ikram,Kiran Ijaz,Mohamed Ali Kaafar,Shlomo Berkovsky

DOI: https://doi.org/10.1136/bmj.n1248

2021-06-16

BMJ

Abstract:Abstract Objectives To investigate whether and what user data are collected by health related mobile applications (mHealth apps), to characterise the privacy conduct of all the available mHealth apps on Google Play, and to gauge the associated risks to privacy. Design Cross sectional study Setting Health related apps developed for the Android mobile platform, available in the Google Play store in Australia and belonging to the medical and health and fitness categories. Participants Users of 20 991 mHealth apps (8074 medical and 12 917 health and fitness found in the Google Play store: in-depth analysis was done on 15 838 apps that did not require a download or subscription fee compared with 8468 baseline non-mHealth apps. Main outcome measures Primary outcomes were characterisation of the data collection operations in the apps code and of the data transmissions in the apps traffic; analysis of the primary recipients for each type of user data; presence of adverts and trackers in the app traffic; audit of the app privacy policy and compliance of the privacy conduct with the policy; and analysis of complaints in negative app reviews. Results 88.0% (n=18 472) of mHealth apps included code that could potentially collect user data. 3.9% (n=616) of apps transmitted user information in their traffic. Most data collection operations in apps code and data transmissions in apps traffic involved external service providers (third parties). The top 50 third parties were responsible for most of the data collection operations in app code and data transmissions in app traffic (68.0% (2140), collectively). 23.0% (724) of user data transmissions occurred on insecure communication protocols. 28.1% (5903) of apps provided no privacy policies, whereas 47.0% (1479) of user data transmissions complied with the privacy policy. 1.3% (3609) of user reviews raised concerns about privacy. Conclusions This analysis found serious problems with privacy and inconsistent privacy practices in mHealth apps. Clinicians should be aware of these and articulate them to patients when determining the benefits and risks of mHealth apps.
Privacy, Data Sharing, and Data Security Policies of Women's mHealth Apps: Scoping Review and Content Analysis

Najd Alfawzan,Markus Christen,Giovanni Spitale,Nikola Biller-Andorno

DOI: https://doi.org/10.2196/33735

2022-05-06

Abstract:Background: Women's mobile health (mHealth) is a growing phenomenon in the mobile app global market. An increasing number of women worldwide use apps geared to female audiences (female technology). Given the often private and sensitive nature of the data collected by such apps, an ethical assessment from the perspective of data privacy, sharing, and security policies is warranted. Objective: The purpose of this scoping review and content analysis was to assess the privacy policies, data sharing, and security policies of women's mHealth apps on the current international market (the App Store on the Apple operating system [iOS] and Google Play on the Android system). Methods: We reviewed the 23 most popular women's mHealth apps on the market by focusing on publicly available apps on the App Store and Google Play. The 23 downloaded apps were assessed manually by 2 independent reviewers against a variety of user data privacy, data sharing, and security assessment criteria. Results: All 23 apps collected personal health-related data. All apps allowed behavioral tracking, and 61% (14/23) of the apps allowed location tracking. Of the 23 apps, only 16 (70%) displayed a privacy policy, 12 (52%) requested consent from users, and 1 (4%) had a pseudoconsent. In addition, 13% (3/23) of the apps collected data before obtaining consent. Most apps (20/23, 87%) shared user data with third parties, and data sharing information could not be obtained for the 13% (3/23) remaining apps. Of the 23 apps, only 13 (57%) provided users with information on data security. Conclusions: Many of the most popular women's mHealth apps on the market have poor data privacy, sharing, and security standards. Although regulations exist, such as the European Union General Data Protection Regulation, current practices do not follow them. The failure of the assessed women's mHealth apps to meet basic data privacy, sharing, and security standards is not ethically or legally acceptable.
Analyzing security issues of android mobile health and medical applications

Gioacchino Tangari,Muhammad Ikram,I Wayan Budi Sentana,Kiran Ijaz,Mohamed Ali Kaafar,Shlomo Berkovsky

DOI: https://doi.org/10.1093/jamia/ocab131

2021-09-18

Abstract:Objective: We conduct a first large-scale analysis of mobile health (mHealth) apps available on Google Play with the goal of providing a comprehensive view of mHealth apps' security features and gauging the associated risks for mHealth users and their data. Materials and methods: We designed an app collection platform that discovered and downloaded more than 20 000 mHealth apps from the Medical and Health & Fitness categories on Google Play. We performed a suite of app code and traffic measurements to highlight a range of app security flaws: certificate security, sensitive or unnecessary permission requests, malware presence, communication security, and security-related concerns raised in user reviews. Results: Compared to baseline non-mHealth apps, mHealth apps generally adopt more reliable signing mechanisms and request fewer dangerous permissions. However, significant fractions of mHealth apps expose users to serious security risks. Specifically, 1.8% of mHealth apps package suspicious codes (eg, trojans), 45.0% rely on unencrypted communication, and as much as 23.0% of personal data (eg, location information and passwords) is sent on unsecured traffic. An analysis of the app reviews reveals that mHealth app users are largely unaware of the surfaced security issues. Conclusion: Despite being better aligned with security best practices than non-mHealth apps, mHealth apps are still far from ensuring robust security guarantees. App users, clinicians, technology developers, and policy makers alike should be cognizant of the uncovered security issues and weigh them carefully against the benefits of mHealth apps.
On the Privacy of Mental Health Apps: An Empirical Investigation and its Implications for Apps Development

Leonardo Horn Iwaya,M. Ali Babar,Awais Rashid,Chamila Wijayarathna

DOI: https://doi.org/10.1007/s10664-022-10236-0

2022-01-22

Abstract:An increasing number of mental health services are offered through mobile systems, a paradigm called mHealth. Although there is an unprecedented growth in the adoption of mHealth systems, partly due to the COVID-19 pandemic, concerns about data privacy risks due to security breaches are also increasing. Whilst some studies have analyzed mHealth apps from different angles, including security, there is relatively little evidence for data privacy issues that may exist in mHealth apps used for mental health services, whose recipients can be particularly vulnerable. This paper reports an empirical study aimed at systematically identifying and understanding data privacy incorporated in mental health apps. We analyzed 27 top-ranked mental health apps from Google Play Store. Our methodology enabled us to perform an in-depth privacy analysis of the apps, covering static and dynamic analysis, data sharing behaviour, server-side tests, privacy impact assessment requests, and privacy policy evaluation. Furthermore, we mapped the findings to the LINDDUN threat taxonomy, describing how threats manifest on the studied apps. The findings reveal important data privacy issues such as unnecessary permissions, insecure cryptography implementations, and leaks of personal data and credentials in logs and web requests. There is also a high risk of user profiling as the apps' development do not provide foolproof mechanisms against linkability, detectability and identifiability. Data sharing among third parties and advertisers in the current apps' ecosystem aggravates this situation. Based on the empirical findings of this study, we provide recommendations to be considered by different stakeholders of mHealth apps in general and apps developers in particular. [...]

Cryptography and Security,Computers and Society
Longitudinal Compliance Analysis of Android Applications with Privacy Policies

Saad Sajid Hashmi,Nazar Waheed,Gioacchino Tangari,Muhammad Ikram,Stephen Smith

DOI: https://doi.org/10.48550/arXiv.2106.10035

2021-07-28

Abstract:Contemporary mobile applications (apps) are designed to track, use, and share users' data, often without their consent, which results in potential privacy and transparency issues. To investigate whether mobile apps have always been (non-)transparent regarding how they collect information about users, we perform a longitudinal analysis of the historical versions of 268 Android apps. These apps comprise 5,240 app releases or versions between 2008 and 2016. We detect inconsistencies between apps' behaviors and the stated use of data collection in privacy policies to reveal compliance issues. We utilize machine learning techniques for the classification of the privacy policy text to identify the purported practices that collect and/or share users' personal information, such as phone numbers and email addresses. We then uncover the data leaks of an app through static and dynamic analysis. Over time, our results show a steady increase in the number of apps' data collection practices that are undisclosed in the privacy policies. This behavior is particularly troubling since privacy policy is the primary tool for describing the app's privacy protection practices. We find that newer versions of the apps are likely to be more non-compliant than their preceding versions. The discrepancies between the purported and the actual data practices show that privacy policies are often incoherent with the apps' behaviors, thus defying the 'notice and choice' principle when users install apps.

Cryptography and Security
Privacy Policy Compliance of Chronic Disease Management Apps in China: Scale Development and Content Evaluation

Zhenni Ni,Yiying Wang,Yuxing Qian

DOI: https://doi.org/10.2196/23409

2021-01-28

JMIR mhealth and uhealth

Abstract:Background With the development of mobile health (mHealth), chronic disease management apps have brought not only the possibility of reducing the burden of chronic diseases but also huge privacy risks to patients’ health data. Objective The purpose of the study was to analyze the extent to which chronic disease management apps in China comply with the Personal Information Security Specification (PI Specification). Methods The compliance of 45 popular chronic disease management apps was evaluated from the perspective of the information life cycle. To conduct a fine-grained evaluation, a scale based on the PI Specification was developed. Finally, 6 level 1 indicators, 22 level 2 indicators, and 61 level 3 indicators were defined. Results There were 33/45 apps (73%) with a privacy policy, and the average score of these apps was 40.4 out of 100. Items of level 1 indicators with high scores included general characteristics (mean 51.9% [SD 28.1%]), information collection and use (mean 51.1% [SD 36.7%]), and information sharing and transfer (mean 50.3% [SD 33.5%]). Information storage and protection had the lowest compliance with PI Specification (mean 29.4% [SD 32.4%]). Few personal information (PI) controllers have stated how to handle security incidents, including security incident reporting (7/33, 21%), security incident notification (10/33, 30%), and commitment to bear corresponding legal responsibility for PI security incidents (1/33, 3%). The performance of apps in the stage of information destruction (mean 31.8% [SD 40.0%]) was poor, and only 21% (7/33) apps would notify third parties to promptly delete PI after individuals cancelled their accounts. Moreover, the scoring rate for rights of PI subjects is generally low (mean 31.2% [SD 35.5%]), especially for obtaining copies of PI (15%) and responding to requests (25%). Conclusions Although most chronic disease management apps had a privacy policy, the total compliance rate of the policy content was low, especially in the stage of information storage and protection. Thus, the field has a long way to go with regard to compliance around personal privacy protection in China.

health care sciences & services,medical informatics
[Structural feature and biological function of PPP2R5C gene].

Yang-qiu Li,Yu-bing Zhou,Li-jian Yang

2009-10-01

Abstract:PPP2R5C is one of the members of regulatory subunits of protein phosphatase 2A (PP2A), which plays a critical role in cell proliferation, differentiation and transformation, based on its induction of dephosphorylation of P53 at various residues. Recently, it was characterized that the alteration of expression pattern of PPP2R5C is associated with cell malignant transformation, thus PPP2R5C was thought as a marker for progressive disease in B-CLL. In this article the gene structure and biological function of PPP2R5C as well as relation of PPP2R5C with genesis and development of cancer were discussed.
Barriers to and Facilitators of the Use of Mobile Health Apps From a Security Perspective: Mixed-Methods Study

Leming Zhou,Jie Bao,Valerie Watzlaf,Bambang Parmanto

DOI: https://doi.org/10.2196/11223

2019-04-16

Abstract:Background: A large number of mobile health (mHealth) apps have been created to help users to manage their health or receive health care services. Many of these mHealth apps have proven to be helpful for maintaining or improving their users' health. However, many people still choose not to use mHealth apps or only use them for a short period. One of the reasons behind this lack of use is the concern for their health information security and privacy. Objective: The goal of this study was to determine the relationship between users' characteristics and their security and privacy concerns and to identify desired security features in mHealth apps, which could reduce these concerns. Methods: A questionnaire was designed and validated by the research team. This questionnaire was then used to determine mobile app users' security and privacy concerns regarding personal health data in mHealth apps as well as the security features most users' desire. A semistructured interview was used to identify barriers to and facilitators of adopting mHealth apps. Results: In total, 117 randomly selected study participants from a large pool took part in this study and provided responses to the validated questionnaire and the semistructured interview questions. The results indicate that most study participants did have concerns about their privacy when using mHealth apps. They also expressed their preferences regarding several security features in mHealth apps, such as regular password updates, remote wipe, user consent, and access control. An association between their demographic characteristics and their concerns and preferences in security and privacy was identified; however, in most cases, the differences among the different demographic groups were not statistically significant, except for a few very specific aspects. These study participants also indicated that the cost of apps and lack of security features in mHealth apps were barriers for adoption, whereas having free apps, strong but easy-to-use security features, and clear user protection privacy policies might encourage them to use mHealth apps in their health management. Conclusions: This questionnaire and interview study verified the security and privacy concerns of mHealth app users, identified the desired security and privacy features, and determined specific barriers to and facilitators of users adopting mHealth apps. The results can be used to guide mHealth app developers to create apps that would be welcomed by users.
Investigating data accessibility of personal health apps

Yoojung Kim,Bongshin Lee,Eun Kyoung Choe

DOI: https://doi.org/10.1093/jamia/ocz003

2019-03-12

Journal of the American Medical Informatics Association

Abstract:Abstract Objective Despite the potential values self-tracking data could offer, we have little understanding of how much access people have to “their” data. Our goal of this article is to unveil the current state of the data accessibility—the degree to which people can access their data—of personal health apps in the market. Materials and Methods We reviewed 240 personal health apps from the App Store and selected 45 apps that support semi-automated tracking. We characterized the data accessibility of these apps using two dimensions—data access methods and data types. Results More than 90% of our sample apps (n = 41) provide some types of data access support, which include synchronizing data with a health platform (ie, Apple Health), file download, and application program interfaces. However, the two approachable data access methods for laypeople—health platform and file download—typically put a significant limit on data format, granularity, and amount, which constrains people from easily repurposing the data. Discussion Personal data should be accessible to the people who collect them, but existing methods lack sufficient support for people in accessing the fine-grained data. Lack of standards in personal health data schema as well as frequent changes in market conditions are additional hurdles to data accessibility. Conclusions Many stakeholders including patients, healthcare providers, researchers, third-party developers, and the general public rely on data accessibility to utilize personal data for various goals. As such, improving data accessibility should be considered as an important factor in designing personal health apps and health platforms.

information science & library science,computer science, information systems, interdisciplinary applications,health care sciences & services,medical informatics
Smartphone Users’ Persuasion Knowledge in the Context of Consumer mHealth Apps: Qualitative Study

Eunsin Joo,Anastasia Kononova,Shaheen Kanthawala,Wei Peng,Shelia Cotten

DOI: https://doi.org/10.2196/16518

2021-04-13

JMIR mhealth and uhealth

Abstract:Background Persuasion knowledge, commonly referred to as advertising literacy, is a cognitive dimension that embraces recognition of advertising, its source and audience, and understanding of advertisers’ persuasive and selling intents as well as tactics. There is little understanding of users’ awareness of organizations that develop or sponsor mobile health (mHealth) apps, especially in light of personal data privacy. Persuasion knowledge or recognition of a supporting organization’s presence, characteristics, competencies, intents, and persuasion tactics are crucial to investigate because app users have the right to know about entities that support apps and make informed decisions about app usage. The abundance of free consumer mHealth apps, especially those in the area of fitness, often makes it difficult for users to identify apps’ dual purposes, which may be related to not only helping the public manage health but also promoting the supporting organization itself and collecting users’ information for further consumer targeting by third parties. Objective This study aims to investigate smartphone users’ awareness of mHealth apps’ affiliations with 3 different types of supporting organizations (commercial, government, and nonprofit); differences in users’ persuasion knowledge and mHealth app quality and credibility evaluations related to each of the 3 organization types; and users’ coping mechanisms for dealing with personal information management within consumer mHealth apps. Methods In-depth semistructured interviews were conducted with 25 smartphone users from a local community in midwestern United States. Interviews were thematically analyzed using inductive and deductive approaches. Results Participants indicated that their awareness of and interest in mHealth app–supporting organizations were secondary to the app’s health management functions. After being probed, participants showed a high level of persuasion knowledge regarding the types of app-supporting organizations and their promotional intents. They thought that commercial companies sponsored mHealth apps mostly as entertainment tools, whereas noncommercial entities sponsored mHealth apps for users’ education. They assigned self-promotional motives to commercial organizations; however, they associated commercial mHealth apps with good quality and functioning. Noncommercial entities were perceived as more credible. Participants were concerned about losing control over personal information within mHealth apps supported by different organizations. They used alternative digital identities to protect themselves from privacy invasion and advertising spam. They were willing to trade some personal information for high-quality commercial mHealth apps. There was a sense of fatalism in discussing privacy risks linked to mHealth app usage, and some participants did not perceive the risks to be serious. Conclusions The discussion of and recommendations for the safe and ethical use of mHealth apps associated with organizations’ promotional strategies and personal data protection are provided to ensure users’ awareness of and enhanced control over digitalized personal information flows. The theoretical implications are discussed in the context of the Persuasion Knowledge Model and dual-processing theories.

health care sciences & services,medical informatics
A Qualitative Analysis Framework for mHealth Privacy Practices

Thomas Cory,Wolf Rieder,Thu-My Huynh

2024-05-28

Abstract:Mobile Health (mHealth) applications have become a crucial part of health monitoring and management. However, the proliferation of these applications has also raised concerns over the privacy and security of Personally Identifiable Information and Protected Health Information. Addressing these concerns, this paper introduces a novel framework for the qualitative evaluation of privacy practices in mHealth apps, particularly focusing on the handling and transmission of sensitive user data. Our investigation encompasses an analysis of 152 leading mHealth apps on the Android platform, leveraging the proposed framework to provide a multifaceted view of their data processing activities. Despite stringent regulations like the General Data Protection Regulation in the European Union and the Health Insurance Portability and Accountability Act in the United States, our findings indicate persistent issues with negligence and misuse of sensitive user information. We uncover significant instances of health information leakage to third-party trackers and a widespread neglect of privacy-by-design and transparency principles. Our research underscores the critical need for stricter enforcement of data protection laws and sets a foundation for future efforts aimed at enhancing user privacy within the mHealth ecosystem.

Computers and Society
Data sharing practices of medicines related apps and the mobile ecosystem: traffic, content, and network analysis

Quinn Grundy,Kellia Chiu,Fabian Held,Andrea Continella,Lisa Bero,Ralph Holz

DOI: https://doi.org/10.1136/bmj.l920

2019-03-20

BMJ

Abstract:Abstract Objectives To investigate whether and how user data are shared by top rated medicines related mobile applications (apps) and to characterise privacy risks to app users, both clinicians and consumers. Design Traffic, content, and network analysis. Setting Top rated medicines related apps for the Android mobile platform available in the Medical store category of Google Play in the United Kingdom, United States, Canada, and Australia. Participants 24 of 821 apps identified by an app store crawling program. Included apps pertained to medicines information, dispensing, administration, prescribing, or use, and were interactive. Interventions Laboratory based traffic analysis of each app downloaded onto a smartphone, simulating real world use with four dummy scripts. The app’s baseline traffic related to 28 different types of user data was observed. To identify privacy leaks, one source of user data was modified and deviations in the resulting traffic observed. Main outcome measures Identities and characterisation of entities directly receiving user data from sampled apps. Secondary content analysis of company websites and privacy policies identified data recipients’ main activities; network analysis characterised their data sharing relations. Results 19/24 (79%) of sampled apps shared user data. 55 unique entities, owned by 46 parent companies, received or processed app user data, including developers and parent companies (first parties) and service providers (third parties). 18 (33%) provided infrastructure related services such as cloud services. 37 (67%) provided services related to the collection and analysis of user data, including analytics or advertising, suggesting heightened privacy risks. Network analysis revealed that first and third parties received a median of 3 (interquartile range 1-6, range 1-24) unique transmissions of user data. Third parties advertised the ability to share user data with 216 “fourth parties”; within this network (n=237), entities had access to a median of 3 (interquartile range 1-11, range 1-140) unique transmissions of user data. Several companies occupied central positions within the network with the ability to aggregate and re-identify user data. Conclusions Sharing of user data is routine, yet far from transparent. Clinicians should be conscious of privacy risks in their own use of apps and, when recommending apps, explain the potential for loss of privacy as part of informed consent. Privacy regulation should emphasise the accountabilities of those who control and process user data. Developers should disclose all data sharing practices and allow users to choose precisely what data are shared and with whom.
Readability and Accessibility of Terms of Service and Privacy Policies for Menstruation-Tracking Smartphone Applications

Leah R Fowler,Charlotte Gillard,Stephanie R Morain

DOI: https://doi.org/10.1177/1524839919899924

Abstract:Over 100 million women track their menstruation using mobile applications (apps). In addition to comparatively unremarkable personal information such as height and weight, these apps collect intimate data like characteristics of vaginal discharge and cervical position. In exchange, many apps claim to predict the timing and duration of menstruation and windows of fertility. From this information, users may modify their sexual behavior based on their reproductive intentions. Though these apps are popular, news reports and prior studies reveal that user expectations about privacy and accuracy often do not align with the content of terms of service and privacy policies. In this article, we analyzed the readability and accessibility of terms of service and privacy policies for 15 popular menstruation-tracking apps. We found that information about data-sharing practices and accuracy is often neither easily accessible nor understandable. As a result, terms of service and privacy policies likely obscure material information about privacy and accuracy, posing safety and reproductive health risks to users. To date, no regulatory body oversees or approves the vast majority of menstruation trackers, leaving the market open to apps that vary widely in quality, accuracy, and levels of protection. We encourage health care professionals to ask their patients and clients about app use and understanding, encourage them to review relevant app-specific information, and discourage use as contraception when indicated. We conclude with recommendations for future research to establish the appropriate standards of disclosure that should govern these and similar types of smartphone-based consumer health technologies.
Security Analysis of Top-Ranked mHealth Fitness Apps: An Empirical Study

Albin Forsberg,Leonardo Horn Iwaya

2024-09-27

Abstract:Mobile health applications (mHealth apps), particularly in the health and fitness category, have experienced an increase in popularity due to their convenience and availability. However, this widespread adoption raises concerns regarding the security of the user's data. In this study, we investigate the security vulnerabilities of ten top-ranked Android health and fitness apps, a set that accounts for 237 million downloads. We performed several static and dynamic security analyses using tools such as the Mobile Security Framework (MobSF) and Android emulators. We also checked the server's security levels with Qualys SSL, which allowed us to gain insights into the security posture of the servers communicating with the mHealth fitness apps. Our findings revealed many vulnerabilities, such as insecure coding, hardcoded sensitive information, over-privileged permissions, misconfiguration, and excessive communication with third-party domains. For instance, some apps store their database API key directly in the code while also exposing their database URL. We found insecure encryption methods in six apps, such as using AES with ECB mode. Two apps communicated with an alarming number of approximately 230 domains each, and a third app with over 100 domains, exacerbating privacy linkability threats. The study underscores the importance of continuous security assessments of top-ranked mHealth fitness apps to better understand the threat landscape and inform app developers.

Cryptography and Security
Evaluating Privacy Measures in Healthcare Apps Predominantly Used by Older Adults

Saka Suleiman,Sanchari Das

2024-10-19

Abstract:The widespread adoption of telehealth systems has led to a significant increase in the use of healthcare apps among older adults, but this rapid growth has also heightened concerns about the privacy of their health information. While HIPAA in the US and GDPR in the EU establish essential privacy protections for health information, limited research exists on the effectiveness of healthcare app privacy policies, particularly those used predominantly by older adults. To address this, we evaluated 28 healthcare apps across multiple dimensions, including regulatory compliance, data handling practices, and privacy-focused usability. To do this, we created a Privacy Risk Assessment Framework (PRAF) and used it to evaluate the privacy risks associated with these healthcare apps designed for older adults. Our analysis revealed significant gaps in compliance with privacy standards to such, only 25% of apps explicitly state compliance with HIPAA, and only 18% mention GDPR. Surprisingly, 79% of these applications lack breach protocols, putting older adults at risk in the event of a data breach.

Cryptography and Security,Computers and Society
Usability Challenges for Health and Wellness Mobile Apps: Mixed-Methods Study Among mHealth Experts and Consumers

Mei Shan Liew,Jian Zhang,Jovis See,Yen Leng Ong

DOI: https://doi.org/10.2196/12160

2019-01-30

Abstract:Background: By 2019, there will be an estimated 4.68 billion mobile phone users globally. This increase comes with an unprecedented proliferation in mobile apps, a plug-and-play product positioned to improve lives in innumerable ways. Within this landscape, medical apps will see a 41% compounded annual growth rate between 2015 and 2020, but paradoxically, prevailing evidence indicates declining downloads of such apps and decreasing "stickiness" with the intended end users. Objective: As usability is a prerequisite for success of health and wellness mobile apps, this paper aims to provide insights and suggestions for improving usability experience of the mobile health (mHealth) app by exploring the degree of alignment between mHealth insiders and consumers. Methods: Usability-related major themes were selected from over 20 mHealth app development studies. The list of themes, grouped into 5 categories using the Nielsen usability model, was then used as a framework to identify and classify the responses from mHealth expert (insider) interviews. Responses from the qualitative phase were integrated into some questions for a quantitative consumer survey. Subsequently, categorical data from qualitative mHealth insider interviews and numerical data from a quantitative consumer survey were compared in order to identify common usability themes and areas of divergence. Results: Of the 5 usability attributes described in Nielsen model, Satisfaction ranked as the top attribute for both mHealth insiders and consumers. Satisfaction refers to user likability, comfort, and pleasure. The consumer survey yielded 451 responses. Out of 9 mHealth insiders' top concerns, 5 were similar to those of the consumers. On the other hand, consumers did not grade themes such as Intuitiveness as important, which was deemed vital by mHealth insiders. Other concerns of the consumers include in-app charges and advertisements. Conclusions: This study supports and contributes to the existing pool of mixed-research studies. Strengthening the connectivity between suppliers and users (through the designed research tool) will help increase uptake of mHealth apps. In a holistic manner, this will have a positive overall outcome for the mHealth app ecosystem.
Mobile Medical Apps and mHealth Devices: A Framework to Build Medical Apps and mHealth Devices in an Ethical Manner to Promote Safer Use - A Literature Review

Mary Sharp,Declan O'Sullivan

Abstract:This paper presents a preliminary literature review in the area of ethics in the development of Mobile Medical Apps and mHealth. The review included both direct health apps and also apps marketed under the area of well-being in addition to mHealth devices. The following words and combinations of them were used to carry out the search for publications, mHealth, Apps, Ethics. The search engines used were Google Scholar, and PubMed. The paper is restricted to publications since 2012. The total number of papers found was 1,920 of which 84 were reviewed. The reason for so few being reviewed was that the majority only considered security. The search revealed many papers dealing with security for all types of apps and mHealth devices but there are very few papers dealing with the ethical issues related to Apps or mHealth devices in the area. It is noted however that the number of apps is increasing in number exponentially and therefore it is argued that it is necessary to pay attention to the ethical aspects. There are now estimated to be 165,000 apps available in this area. How ethics are addressed in health and well-being apps is important as they can have an effect on the health of the individual using them. In a similar way, the need for addressing ethical issues for development of well-being apps is evident. In a study [1] it was noted that even though Electronic Health Record (EHR) was the highest ranked tablet-related task only one third of clinicians said that EHR was optimized for smartphones. When apps are integrated with the EHR they fully optimize productivity. In the same study the significant challenges identified included the method of evaluation and selection of mobile health solutions in order to ensure that clinical outcomes, care and efficiency are included. Security is mentioned but again wider ethical issues were not a consideration. From the literature review it is clear that there is a need for guidelines for how developers of medical ad well-being apps and mHealth devices should address ethical issues during development, and the generation of these guidelines is the subject of ongoing research by the authors.
Developments in Privacy and Data Ownership in Mobile Health Technologies, 2016-2019

Hannah K. Galvin,Paul R. DeMuro

DOI: https://doi.org/10.1055/s-0040-1701987

2020-08-01

Yearbook of Medical Informatics

Abstract:Objectives: To survey international regulatory frameworks that serve to protect privacy of personal data as a human right as well as to review the literature regarding privacy protections and data ownership in mobile health (mHealth) technologies between January 1, 2016 and June 1, 2019 in order to identify common themes. Methods: We performed a review of relevant literature available in English published between January 1, 2016 and June 1, 2019 from databases including PubMed, Google Scholar, and Web of Science, as well as relevant legislative background material. Articles out of scope (as detailed below) were eliminated. We categorized the remaining pool of articles and discrete themes were identified, specifically: concerns around data transmission and storage, including data ownership and the ability to re-identify previously de-identified data; issues with user consent (including the availability of appropriate privacy policies) and access control; and the changing culture and variable global attitudes toward privacy of health data. Results: Recent literature demonstrates that the security of mHealth data storage and transmission remains of wide concern, and aggregated data that were previously considered “de-identified” have now been demonstrated to be re-identifiable. Consumer-informed consent may be lacking with regard to mHealth applications due to the absence of a privacy policy and/or to text that is too complex and lengthy for most users to comprehend. The literature surveyed emphasizes improved access control strategies. This survey also illustrates a wide variety of global user perceptions regarding health data privacy. Conclusion: The international regulatory framework that serves to protect privacy of personal data as a human right is diverse. Given the challenges legislators face to keep up with rapidly advancing technology, we introduce the concept of a “healthcare fiduciary” to serve the best interest of data subjects in the current environment.
Current Status and Outlook of Mobile Health APPs

Hui GONG,Weili YAN,Xiaoqing YANG

DOI: https://doi.org/10.12114/j.issn.1007-9572.2018.00.010

2018-01-01

Chinese General Practice

Abstract:This article discusses the current status,development barriers,and development directions of consumer-oriented mobile health applications (mHealth APPs).Currently,there are more than 165 000 mHealth APPs in the main APP stores.The top two categories are health management and disease management.Other categories include self-diagnosis, medication reminders,patient web portals,and rehabilitation management.These APPs provide end-users with low-cost,high-quality,24/7 access to health information worldwide.However,owing to a lack of supervision,a lack of relevant evidence-based information,and concerns about privacy and security,mHealth APPs still have many areas in which to improve.Future directions may include integrating data into health care systems,providing interactive application platforms,granting access to electronic health records,providing cloud-based storage of personal health records,and delivering prescriptions through APPs. For mHealth APPs to achieve maximum value in healthcare and chronic disease management,all stakeholders in the industry must work together to overcome related obstacles.
Health App Use Among US Mobile Phone Owners: A National Survey

Paul Krebs,Dustin T Duncan

DOI: https://doi.org/10.2196/mhealth.4924

2015-11-04

JMIR mhealth and uhealth

Abstract:BACKGROUND: Mobile phone health apps may now seem to be ubiquitous, yet much remains unknown with regard to their usage. Information is limited with regard to important metrics, including the percentage of the population that uses health apps, reasons for adoption/nonadoption, and reasons for noncontinuance of use.OBJECTIVE: The purpose of this study was to examine health app use among mobile phone owners in the United States.METHODS: We conducted a cross-sectional survey of 1604 mobile phone users throughout the United States. The 36-item survey assessed sociodemographic characteristics, history of and reasons for health app use/nonuse, perceived effectiveness of health apps, reasons for stopping use, and general health status.RESULTS: A little over half (934/1604, 58.23%) of mobile phone users had downloaded a health-related mobile app. Fitness and nutrition were the most common categories of health apps used, with most respondents using them at least daily. Common reasons for not having downloaded apps were lack of interest, cost, and concern about apps collecting their data. Individuals more likely to use health apps tended to be younger, have higher incomes, be more educated, be Latino/Hispanic, and have a body mass index (BMI) in the obese range (all P<.05). Cost was a significant concern among respondents, with a large proportion indicating that they would not pay anything for a health app. Interestingly, among those who had downloaded health apps, trust in their accuracy and data safety was quite high, and most felt that the apps had improved their health. About half of the respondents (427/934, 45.7%) had stopped using some health apps, primarily due to high data entry burden, loss of interest, and hidden costs.CONCLUSIONS: These findings suggest that while many individuals use health apps, a substantial proportion of the population does not, and that even among those who use health apps, many stop using them. These data suggest that app developers need to better address consumer concerns, such as cost and high data entry burden, and that clinical trials are necessary to test the efficacy of health apps to broaden their appeal and adoption.

health care sciences & services,medical informatics

Patchiness of mucosal inflammation in treated ulcerative colitis: a prospective study.

Mobile health and privacy: cross sectional study

Privacy, Data Sharing, and Data Security Policies of Women's mHealth Apps: Scoping Review and Content Analysis

Analyzing security issues of android mobile health and medical applications

On the Privacy of Mental Health Apps: An Empirical Investigation and its Implications for Apps Development

Longitudinal Compliance Analysis of Android Applications with Privacy Policies

Privacy Policy Compliance of Chronic Disease Management Apps in China: Scale Development and Content Evaluation

[Structural feature and biological function of PPP2R5C gene].

Barriers to and Facilitators of the Use of Mobile Health Apps From a Security Perspective: Mixed-Methods Study

Investigating data accessibility of personal health apps

Smartphone Users’ Persuasion Knowledge in the Context of Consumer mHealth Apps: Qualitative Study

A Qualitative Analysis Framework for mHealth Privacy Practices

Data sharing practices of medicines related apps and the mobile ecosystem: traffic, content, and network analysis

Readability and Accessibility of Terms of Service and Privacy Policies for Menstruation-Tracking Smartphone Applications

Security Analysis of Top-Ranked mHealth Fitness Apps: An Empirical Study

Evaluating Privacy Measures in Healthcare Apps Predominantly Used by Older Adults

Usability Challenges for Health and Wellness Mobile Apps: Mixed-Methods Study Among mHealth Experts and Consumers

Mobile Medical Apps and mHealth Devices: A Framework to Build Medical Apps and mHealth Devices in an Ethical Manner to Promote Safer Use - A Literature Review

Developments in Privacy and Data Ownership in Mobile Health Technologies, 2016-2019

Current Status and Outlook of Mobile Health APPs

Health App Use Among US Mobile Phone Owners: A National Survey