Smartphone‐based public health information systems: Anonymity, privacy and intervention

The pervasive availability of smartphones and their connected external sensors or wearable devices can provide a new public health data collection capability. Current research and commercial efforts have concentrated on sensor-based collection of health data for personal fitness and healthcare feedback purposes. However, to date there has not been a detailed investigation of how such smartphones and sensors can be utilized for public health data collection purposes. Public health data have the characteristic of being capturable while still not infringing upon privacy, as the full detailed data of individuals are not needed but rather only anonymized, aggregate, de-identified, and non-unique data for an individual. For example, rather than details of physical activity including specific route, just total caloric burn over a week or month could be submitted, thereby strongly assisting non-re-identification. In this paper we introduce, prototype, and evaluate a new type of public health information system to provide aggregate population health data capture and public health intervention capabilities via utilizing smartphone and sensor capabilities, while fully maintaining the anonymity and privacy of each individual. We consider in particular the key aspects of privacy, anonymity, and intervention capabilities of these emerging systems and provide a detailed evaluation of anonymity preservation characteristics.