system. Towards this end, we propose privacy risk models as a general method for refining privacy from an abstract concept … into concrete issues for specific applications and prioritizing those issues. In this paper, we introduce a privacy risk … privacy risk model in the design of two ubiquitous computing applications. …