The system currently works with Android mobile phones and tablets. CreepyLeaks is composed by three parts: 1) The AntMonitor app, 2) an app that decides the severity of a leakage and 3) a purpose-made bluetooth-enabled hardware that notiieces the user of a leakage using Electrical Muscle Stimulation (EMS). The app AntMonitor run on the mobile device and detects data leakages from the mobile device in realtime, regardless if the mobile device is used or not. When a data leakage occur, for example if the so-called AdvertiserID or the mobile device’s current location is sent to an ad-server, this is forwarded to the severity-decission app also running on the mobile device. This app check the severity of the leakage (something that can be configured by the researchers for each test person and device). Based on its decission, the app notifies the purpose-made CreepyLeaks hardware over bluetooth about the leakage and its severity. The CreepyLeaks hardware have two electrodes that are attached to the user’s body. The two electordes allows the hardware to send small amounts of electrical current (using EMS) into the user’s body creating a small muscle contraction for each detected data leakage. The more severe the leakage, the stronger is the signal sent into the body.