Proceedings of the Annual Meeting of the Cognitive Science Society

When children use online apps, they often share personal information, such as their name, address, and birthday. In the present study, we investigated the mental models children use to reason about what apps are allowed to do with personal data after it has been willingly shared with an app. 57 children ages 8- to 11-years-old were read a story in which they were asked to judge whether an online game (app) was allowed or not allowed to perform four different actions: looking, saving, selling, and showing. We compared these judgments to a comparison condition where we asked children what users themselves should be allowed to do with their data. We found that children viewed the app as less permitted to act on the data than users as well as some further differences by action-type. Our findings suggest that children use something akin to a “lending” model to conceptualize data transfers, in which apps have less rights than users despite the data being willingly transferred to the app. Our findings also suggest that children differentiate among the uses of information as children think certain actions by the app are less permissible than others (e.g., looking is more permissible than selling).