The Power of Words: A Comprehensive Analysis of Rationales and Their Effects on Users’ Permission Decisions

Yusra Elbitar

Network and Distributed System Security (NDSS) Symposium 2025 · Day 1 · Privacy & Usability 1

In the increasingly security-conscious landscape of mobile technology, users are frequently confronted with decisions regarding app permissions. The talk "The Power of Words: A Comprehensive Analysis of Rationales and Their Effects on Users’ Permission Decisions," presented at the NDSS Symposium, delves into a critical yet often overlooked aspect of this interaction: the text accompanying runtime permission requests, known as **permission rationals**. This research, primarily attributed to Yusra Elbitar and co-authored by Yen and Alexander, investigates how the specific phrasing of these rationals influences user behavior, trust, and overall experience. Alexander, representing CISPA, delivered the presentation, highlighting the profound impact that seemingly minor linguistic variations can have on significant security decisions.

AI review

Competent HCI-security research with a clean methodology — large-scale crawl plus 960-participant vignette study — that produces a handful of non-obvious findings (politeness backfires, gain framing decreases satisfaction, guarantees and reversibility outperform everything else). Fits the NDSS venue well but doesn't push deep enough on threat modeling or adversarial misuse to make it genuinely dangerous or memorable.

Watch on YouTube