A Multi-Store Privacy Measurement of Virtual Reality App Ecosystem

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Yan, Chuan, Li, Zeng, Cai, Kunlin, Wan, Liuhuo, Ren, Ruomai, Shen, Yiran, Bai, Guangdong
Formato: Preprint
Publicado: 2025
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866918172817358848
author Yan, Chuan
Li, Zeng
Cai, Kunlin
Wan, Liuhuo
Ren, Ruomai
Shen, Yiran
Bai, Guangdong
author_facet Yan, Chuan
Li, Zeng
Cai, Kunlin
Wan, Liuhuo
Ren, Ruomai
Shen, Yiran
Bai, Guangdong
contents Virtual Reality (VR) has gained increasing traction among various domains in recent years, with major companies such as Meta, Pico, and Microsoft launching their application stores to support third-party developers in releasing their applications (or simply apps). These apps offer rich functionality but inherently collect privacy-sensitive data, such as user biometrics, behaviors, and the surrounding environment. Nevertheless, there is still a lack of domain-specific regulations to govern the data handling of VR apps, resulting in significant variations in their privacy practices among app stores. In this work, we present the first comprehensive multi-store study of privacy practices in the current VR app ecosystem, covering a large-scale dataset involving 6,565 apps collected from five major app stores. We assess both declarative and behavioral privacy practices of VR apps, using a multi-faceted approach based on natural language processing, reverse engineering, and static analysis. Our assessment reveals significant privacy compliance issues across all stores, underscoring the premature status of privacy protection in this rapidly growing ecosystem. For instance, one third of apps fail to declare their use of sensitive data, and 21.5\% of apps neglect to provide valid privacy policies. Our work sheds light on the status quo of privacy protection within the VR app ecosystem for the first time. Our findings should raise an alert to VR app developers and users, and encourage store operators to implement stringent regulations on privacy compliance among VR apps.
format Preprint
id arxiv_https___arxiv_org_abs_2510_23024
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle A Multi-Store Privacy Measurement of Virtual Reality App Ecosystem
Yan, Chuan
Li, Zeng
Cai, Kunlin
Wan, Liuhuo
Ren, Ruomai
Shen, Yiran
Bai, Guangdong
Cryptography and Security
Software Engineering
Virtual Reality (VR) has gained increasing traction among various domains in recent years, with major companies such as Meta, Pico, and Microsoft launching their application stores to support third-party developers in releasing their applications (or simply apps). These apps offer rich functionality but inherently collect privacy-sensitive data, such as user biometrics, behaviors, and the surrounding environment. Nevertheless, there is still a lack of domain-specific regulations to govern the data handling of VR apps, resulting in significant variations in their privacy practices among app stores. In this work, we present the first comprehensive multi-store study of privacy practices in the current VR app ecosystem, covering a large-scale dataset involving 6,565 apps collected from five major app stores. We assess both declarative and behavioral privacy practices of VR apps, using a multi-faceted approach based on natural language processing, reverse engineering, and static analysis. Our assessment reveals significant privacy compliance issues across all stores, underscoring the premature status of privacy protection in this rapidly growing ecosystem. For instance, one third of apps fail to declare their use of sensitive data, and 21.5\% of apps neglect to provide valid privacy policies. Our work sheds light on the status quo of privacy protection within the VR app ecosystem for the first time. Our findings should raise an alert to VR app developers and users, and encourage store operators to implement stringent regulations on privacy compliance among VR apps.
title A Multi-Store Privacy Measurement of Virtual Reality App Ecosystem
topic Cryptography and Security
Software Engineering
url https://arxiv.org/abs/2510.23024