A Comparative Study of Dark Patterns Across Web and Mobile Modalities

Dark patterns are user interface elements that can influence a person's behavior against their intentions or best interests. Prior work identified these patterns in websites and mobile apps, but little is known about how the design of platforms might impact dark pattern manifestations and related human vulnerabilities. In this paper, we conduct a comparative study of mobile application, mobile browser, and web browser versions of 105 popular services to investigate variations in dark patterns across modalities. We perform manual tests, identify dark patterns in each service, and examine how they persist or differ by modality. Our findings show that while services can employ some dark patterns equally across modalities, many dark patterns vary between platforms, and that these differences saddle people with inconsistent experiences of autonomy, privacy, and control. We conclude by discussing broader implications for policymakers and practitioners, and provide suggestions for furthering dark patterns research.

[1]  Arvind Narayanan,et al.  Dark patterns , 2020, ACM Queue.

[2]  Benjamin Fabian,et al.  Large-scale readability analysis of privacy policies , 2017, WI.

[3]  Hana Habib,et al.  "It's a scavenger hunt": Usability of Websites' Opt-Out and Data Deletion Choices , 2020, CHI.

[4]  Sebastian Boring,et al.  Dark patterns in proxemic interactions: a critical perspective , 2014, Conference on Designing Interactive Systems.

[5]  Christo Wilson,et al.  Who's the Guinea Pig?: Investigating Online A/B/n Tests in-the-Wild , 2019, FAT.

[6]  Daniel D. Suthers,et al.  I'm supposed to see that?' AdChoices Usability in the Mobile Environment , 2018, HICSS.

[7]  Colin M. Gray,et al.  Co-Evolving Towards Evil Design Outcomes: Mapping Problem and Solution Process Moves , 2020 .

[8]  Kassem Fawaz,et al.  The Privacy Policy Landscape After the GDPR , 2018, Proc. Priv. Enhancing Technol..

[9]  Colin M. Gray,et al.  #darkpatterns: UX Practitioner Conversations About Ethical Design , 2018, CHI Extended Abstracts.

[10]  Wouter Joosen,et al.  Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulation , 2018, NDSS.

[11]  Colin M. Gray,et al.  What Kind of Work Do "Asshole Designers" Create? Describing Properties of Ethical Concern on Reddit , 2020, Conference on Designing Interactive Systems.

[12]  Staffan Björk,et al.  Dark patterns in the design of games , 2013, FDG.

[13]  Paul Resnick,et al.  Impulse Buying: Design Practices and Consumer Needs , 2019, CHI.

[14]  Shining a Light on Dark Patterns , 2021 .

[15]  Gregory J. Conti,et al.  Malicious interface design: exploiting the user , 2010, WWW '10.

[16]  Melanie Volkamer,et al.  "This Website Uses Cookies": Users' Perceptions and Reactions to the Cookie Disclaimer , 2018 .

[17]  Martin Degeling,et al.  (Un)informed Consent: Studying GDPR Consent Notices in the Field , 2019, CCS.

[18]  Woodrow Hartzog,et al.  Privacy’s Blueprint: The Battle to Control the Design of New Technologies , 2018 .

[19]  Arvind Narayanan,et al.  Dark patterns , 2020, Commun. ACM.

[20]  Norman M. Sadeh,et al.  Which Apps Have Privacy Policies? - An Analysis of Over One Million Google Play Store Apps , 2018, APF.

[21]  Oded Nov,et al.  How Deceptive are Deceptive Visualizations?: An Empirical Analysis of Common Distortion Techniques , 2015, CHI.

[22]  Sameer Patil,et al.  Why Johnny Can't Unsubscribe: Barriers to Stopping Unwanted Email , 2020, CHI.

[23]  Arieh Waldman.  Cognitive Biases, Dark Patterns, and the 'Privacy Paradox' , 2019, Current opinion in psychology.

[24]  A. Feinstein,et al.  High agreement but low kappa: II. Resolving the paradoxes. , 1990, Journal of clinical epidemiology.

[25]  Midas Nouwens,et al.  Dark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their Influence , 2020, CHI.

[26]  Woodrow Hartzog.  Website Design as Contract , 2011 .

[27]  Alessandro Acquisti,et al.  Sleights of privacy: framing, disclosures, and the limits of transparency , 2013, SOUPS.

[28]  Piotr Sapiezynski,et al.  Investigating sources of PII used in Facebook’s targeted advertising , 2019, Proc. Priv. Enhancing Technol..

[29]  Norman M. Sadeh,et al.  MAPS: Scaling Privacy Compliance Analysis to a Million Apps , 2019, Proc. Priv. Enhancing Technol..

[30]  Martino Trevisan,et al.  4 Years of EU Cookie Law: Results and Lessons Learned , 2017, Proc. Priv. Enhancing Technol..

[31]  Anthony D. Miyazaki.  Online Privacy and the Disclosure of Cookie Use: Effects on Consumer Trust and Anticipated Patronage , 2008 .

[32]  Linda Di Geronimo,et al.  UI Dark Patterns and Where to Find Them: A Study on Mobile Applications and User Perception , 2020, CHI.

[33]  Thorsten Holz,et al.  We Value Your Privacy ... Now Take Some Cookies: Measuring the GDPR's Impact on Web Privacy , 2019, NDSS.

[34]  Jamie B. Luguri,et al.  Shining a Light on Dark Patterns , 2019, Journal of Legal Analysis.

[35]  Lorrie Faith Cranor,et al.  An Empirical Analysis of Data Deletion and Opt-Out Choices on 150 Websites , 2019, SOUPS @ USENIX Security Symposium.

[36]  Colin M. Gray,et al.  Dark Intentions or Persuasion?: UX Designers' Activation of Stakeholder and User Values , 2018, Conference on Designing Interactive Systems.

[37]  Leyla Bilge,et al.  Can I Opt Out Yet?: GDPR and the Global Illusion of Cookie Control , 2019, AsiaCCS.

[38]  Colin M. Gray,et al.  Analyzing Value Discovery in Design Decisions Through Ethicography , 2019, CHI.

[39]  Colin M. Gray,et al.  Ethical Mediation in UX Practice , 2019, CHI.

[40]  D. Norman.  The Design of Everyday Things: Revised and Expanded Edition , 2013 .

[41]  Colin M. Gray,et al.  "Nothing Comes Before Profit": Asshole Design In the Wild , 2019, CHI Extended Abstracts.

[42]  Cristiana Santos,et al.  Dark Patterns and the Legal Requirements of Consent Banners: An Interaction Criticism Perspective , 2020, ArXiv.

[43]  Frank Kargl,et al.  Tales from the Dark Side: Privacy Dark Strategies and Privacy Dark Patterns , 2016, Proc. Priv. Enhancing Technol..

[44]  Colin Potts,et al.  Privacy policies as decision-making tools: an evaluation of online privacy notices , 2004, CHI.

[45]  Lorrie Faith Cranor,et al.  How Short Is Too Short? Implications of Length and Framing on the Effectiveness of Privacy Notices , 2016, SOUPS.

[46]  Lorrie Faith Cranor,et al.  The Impact of Timing on the Salience of Smartphone App Privacy Notices , 2015, SPSM@CCS.

[47]  A. Feinstein,et al.  High agreement but low kappa: I. The problems of two paradoxes. , 1990, Journal of clinical epidemiology.

[48]  Chris Arney.  Nudge: Improving Decisions about Health, Wealth, and Happiness , 2015 .

[49]  Jacques Klein,et al.  AndroZoo: Collecting Millions of Android Apps for the Research Community , 2016, 2016 IEEE/ACM 13th Working Conference on Mining Software Repositories (MSR).

[50]  Colin M. Gray,et al.  The Dark (Patterns) Side of UX Design , 2018, CHI.

[51]  Desney S. Tan,et al.  Benevolent deception in human computer interaction , 2013, CHI.

[52]  R. Thaler.  Nudge, not sludge , 2018, Science.