Beyond Permissions: Investigating Mobile Personalization with Simulated Personas
Abstract
Mobile applications increasingly rely on sensor data to infer user context and deliver personalized experiences. Yet the mechanisms behind this personalization remain opaque to users and researchers alike. This paper presents a sandbox system that uses sensor spoofing and persona simulation to audit and visualize how mobile apps respond to inferred behaviors. Rather than treating spoofing as adversarial, we demonstrate its use as a tool for behavioral transparency and user empowerment. Our system injects multi-sensor profiles - generated from structured, lifestyle-based personas - into Android devices in real time, enabling users to observe app responses to contexts such as high activity, location shifts, or time-of-day changes. With automated screenshot capture and GPT-4 Vision-based UI summarization, our pipeline helps document subtle personalization cues. Preliminary findings show measurable app adaptations across fitness, e-commerce, and everyday service apps such as weather and navigation. We offer this toolkit as a foundation for privacy-enhancing technologies and user-facing transparency interventions.
Cite
@article{arxiv.2511.01336,
title = {Beyond Permissions: Investigating Mobile Personalization with Simulated Personas},
author = {Ibrahim Khalilov and Chaoran Chen and Ziang Xiao and Tianshi Li and Toby Jia-Jun Li and Yaxing Yao},
journal= {arXiv preprint arXiv:2511.01336},
year = {2025}
}
Comments
8 pages, 7 figures. Accepted to the ACM Workshop on Human-Centered AI Privacy and Security (HAIPS @ CCS 2025). DOI: 10.1145/3733816.3760758 (ACM Digital Library link pending activation)