I. Introduction
There emerged a large amount of applications, especially mobile applications, harnessing user-generated data, to deliver values to either users or organizations (or both). To distribute these applications, all major platforms now provide their application marketplaces. Although such model has been proven to be easy for user to find and install application, and helpful to prosper the application development, there still exists some important issues including the one we are targeting in this paper: the risk that the application can collect the user data without letting users know. This problem comes from two aspects: