{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:UE6PGNLIKTOM4VS2OWD4SMKBGK","short_pith_number":"pith:UE6PGNLI","canonical_record":{"source":{"id":"2306.17063","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-29T16:10:18Z","cross_cats_sorted":[],"title_canon_sha256":"884e026bcbff3664502c16c7f2d05b16fba7a6062974151d3cf5a69e2dff8cb0","abstract_canon_sha256":"6273f91d461b4e7cc33d7297c609e9d75da90d867064de6e59dfeb03e83731c9"},"schema_version":"1.0"},"canonical_sha256":"a13cf3356854dcce565a7587c93141329e7d82288c080e8c73c8affd2b56cdd0","source":{"kind":"arxiv","id":"2306.17063","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.17063","created_at":"2026-07-05T08:32:30Z"},{"alias_kind":"arxiv_version","alias_value":"2306.17063v2","created_at":"2026-07-05T08:32:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.17063","created_at":"2026-07-05T08:32:30Z"},{"alias_kind":"pith_short_12","alias_value":"UE6PGNLIKTOM","created_at":"2026-07-05T08:32:30Z"},{"alias_kind":"pith_short_16","alias_value":"UE6PGNLIKTOM4VS2","created_at":"2026-07-05T08:32:30Z"},{"alias_kind":"pith_short_8","alias_value":"UE6PGNLI","created_at":"2026-07-05T08:32:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:UE6PGNLIKTOM4VS2OWD4SMKBGK","target":"record","payload":{"canonical_record":{"source":{"id":"2306.17063","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-29T16:10:18Z","cross_cats_sorted":[],"title_canon_sha256":"884e026bcbff3664502c16c7f2d05b16fba7a6062974151d3cf5a69e2dff8cb0","abstract_canon_sha256":"6273f91d461b4e7cc33d7297c609e9d75da90d867064de6e59dfeb03e83731c9"},"schema_version":"1.0"},"canonical_sha256":"a13cf3356854dcce565a7587c93141329e7d82288c080e8c73c8affd2b56cdd0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:32:30.326646Z","signature_b64":"ruZHu1I4TrLkKvn6uHUHdn4PGf7rAQ5cu0kZpEx43ip4xanwtGVM6PID4ilhHCSVH4qXRWLnhad+H1pfXnM5Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a13cf3356854dcce565a7587c93141329e7d82288c080e8c73c8affd2b56cdd0","last_reissued_at":"2026-07-05T08:32:30.326064Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:32:30.326064Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.17063","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:32:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"afakMtagxWlrlI8imS/IRXXmSJTsr3b247+eG3tvG8BKa+puMS8ZeIXBUEigUE+RX/yI83vVvZtl1HIhz6p+Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T12:43:55.520943Z"},"content_sha256":"be6df0f8efdd254b4c139d1e5c39c8673060a32d94d19669fde9a1f1683d0a94","schema_version":"1.0","event_id":"sha256:be6df0f8efdd254b4c139d1e5c39c8673060a32d94d19669fde9a1f1683d0a94"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:UE6PGNLIKTOM4VS2OWD4SMKBGK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Honesty is the Best Policy: On the Accuracy of Apple Privacy Labels Compared to Apps' Privacy Policies","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Adam J. Aviv, Chris Kanich, David G. Balash, Mir Masood Ali, Monica Kodwani","submitted_at":"2023-06-29T16:10:18Z","abstract_excerpt":"Apple introduced privacy labels in Dec. 2020 as a way for developers to report the privacy behaviors of their apps. While Apple does not validate labels, they also require developers to provide a privacy policy, which offers an important comparison point. In this paper, we fine-tuned BERT-based language models to extract privacy policy features for 474,669 apps on the iOS App Store, comparing the output to the privacy labels. We identify discrepancies between the policies and the labels, particularly as they relate to data collected linked to users. We find that 228K apps' privacy policies may"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.17063","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.17063/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:32:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k1VzkvXskDsThfatsIrEeUUKJooEl0vY0P1k8qsfTbG3P3Ielgn2dr1Re2AktNhQvq6vWZahlmpPB2ebxxNdAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T12:43:55.521885Z"},"content_sha256":"1a644ab5c20e4f93a9bc5897c835b4218feae9db145d4301fb29b0b6815e5b87","schema_version":"1.0","event_id":"sha256:1a644ab5c20e4f93a9bc5897c835b4218feae9db145d4301fb29b0b6815e5b87"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UE6PGNLIKTOM4VS2OWD4SMKBGK/bundle.json","state_url":"https://pith.science/pith/UE6PGNLIKTOM4VS2OWD4SMKBGK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UE6PGNLIKTOM4VS2OWD4SMKBGK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T12:43:55Z","links":{"resolver":"https://pith.science/pith/UE6PGNLIKTOM4VS2OWD4SMKBGK","bundle":"https://pith.science/pith/UE6PGNLIKTOM4VS2OWD4SMKBGK/bundle.json","state":"https://pith.science/pith/UE6PGNLIKTOM4VS2OWD4SMKBGK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UE6PGNLIKTOM4VS2OWD4SMKBGK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:UE6PGNLIKTOM4VS2OWD4SMKBGK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6273f91d461b4e7cc33d7297c609e9d75da90d867064de6e59dfeb03e83731c9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-29T16:10:18Z","title_canon_sha256":"884e026bcbff3664502c16c7f2d05b16fba7a6062974151d3cf5a69e2dff8cb0"},"schema_version":"1.0","source":{"id":"2306.17063","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.17063","created_at":"2026-07-05T08:32:30Z"},{"alias_kind":"arxiv_version","alias_value":"2306.17063v2","created_at":"2026-07-05T08:32:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.17063","created_at":"2026-07-05T08:32:30Z"},{"alias_kind":"pith_short_12","alias_value":"UE6PGNLIKTOM","created_at":"2026-07-05T08:32:30Z"},{"alias_kind":"pith_short_16","alias_value":"UE6PGNLIKTOM4VS2","created_at":"2026-07-05T08:32:30Z"},{"alias_kind":"pith_short_8","alias_value":"UE6PGNLI","created_at":"2026-07-05T08:32:30Z"}],"graph_snapshots":[{"event_id":"sha256:1a644ab5c20e4f93a9bc5897c835b4218feae9db145d4301fb29b0b6815e5b87","target":"graph","created_at":"2026-07-05T08:32:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.17063/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Apple introduced privacy labels in Dec. 2020 as a way for developers to report the privacy behaviors of their apps. While Apple does not validate labels, they also require developers to provide a privacy policy, which offers an important comparison point. In this paper, we fine-tuned BERT-based language models to extract privacy policy features for 474,669 apps on the iOS App Store, comparing the output to the privacy labels. We identify discrepancies between the policies and the labels, particularly as they relate to data collected linked to users. We find that 228K apps' privacy policies may","authors_text":"Adam J. Aviv, Chris Kanich, David G. Balash, Mir Masood Ali, Monica Kodwani","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-29T16:10:18Z","title":"Honesty is the Best Policy: On the Accuracy of Apple Privacy Labels Compared to Apps' Privacy Policies"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.17063","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:be6df0f8efdd254b4c139d1e5c39c8673060a32d94d19669fde9a1f1683d0a94","target":"record","created_at":"2026-07-05T08:32:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6273f91d461b4e7cc33d7297c609e9d75da90d867064de6e59dfeb03e83731c9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-29T16:10:18Z","title_canon_sha256":"884e026bcbff3664502c16c7f2d05b16fba7a6062974151d3cf5a69e2dff8cb0"},"schema_version":"1.0","source":{"id":"2306.17063","kind":"arxiv","version":2}},"canonical_sha256":"a13cf3356854dcce565a7587c93141329e7d82288c080e8c73c8affd2b56cdd0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a13cf3356854dcce565a7587c93141329e7d82288c080e8c73c8affd2b56cdd0","first_computed_at":"2026-07-05T08:32:30.326064Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:32:30.326064Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ruZHu1I4TrLkKvn6uHUHdn4PGf7rAQ5cu0kZpEx43ip4xanwtGVM6PID4ilhHCSVH4qXRWLnhad+H1pfXnM5Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:32:30.326646Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.17063","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:be6df0f8efdd254b4c139d1e5c39c8673060a32d94d19669fde9a1f1683d0a94","sha256:1a644ab5c20e4f93a9bc5897c835b4218feae9db145d4301fb29b0b6815e5b87"],"state_sha256":"a80ae1e3a0bb1c4843b1ee4c09b5f11014d8d57a71470a01ae36f48c93a69a1f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nDeT57hUkLRvkR8zrRzfqaDs71/DJ3rDa6Lr1dy4Asroe0jwRoqUz4yNWzlwCXcpP4TpQ7D32v8JffN58ZTnCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T12:43:55.535149Z","bundle_sha256":"ec79804cf9cae02af7a2bf791b78cba5eaf4632e9a6dfbb630ec8c03811ecbef"}}