A computer-implemented method for providing a user interface to a user for interacting with a suggested application on a computing device, the method comprising, at the computing device: detecting an event at an input device of the computing device; determining that the event corresponds to one of a group of triggering events wherein each of the triggering events in the group of triggering events is designated for identifying one or more suggested applications that are likely to be used by the user from among a plurality of applications on the computing device; upon determining that the event corresponds to one of a group of triggering events, selecting a first prediction model corresponding to the event, wherein the first prediction model is selected from a plurality of prediction models, and wherein each of the plurality of prediction models corresponds to a different triggering event; receiving contextual information about the computing device, the contextual information specifying one or more properties of the computing device for a first context; identifying, by the first prediction model, a set of one or more applications that have at least a threshold probability of being accessed by the user when the event occurs in association with the first context, wherein the first prediction model is trained using historical interactions of the user with the computing device after the event is detected under different contexts; providing the user interface to the user for interacting with the set of one or more applications, wherein the user interface is provided on a lock screen of the computing device, the user interface allowing selection of one of the set of applications from the lock screen; determining whether a threshold period of time has elapsed; removing the user interface when it is determined that the threshold period of time has elapsed; determining whether the user seeks to access the set of one or more applications when it is determined that the threshold period of time has not elapsed; and running the set of one or more applications when it is determined that the user seeks to access the set of one or more applications, wherein functionality of a selected one of the set of applications provided on the lock screen is limited until the user is authenticated. detecting an event at an input device of the computing device; determining that the event corresponds to one of a group of triggering events wherein each of the triggering events in the group of triggering events is designated for identifying one or more suggested applications that are likely to be used by the user from among a plurality of applications on the computing device; upon determining that the event corresponds to one of a group of triggering events, selecting a first prediction model corresponding to the event, wherein the first prediction model is selected from a plurality of prediction models, and wherein each of the plurality of prediction models corresponds to a different triggering event; receiving contextual information about the computing device, the contextual information specifying one or more properties of the computing device for a first context; identifying, by the first prediction model, a set of one or more applications that have at least a threshold probability of being accessed by the user when the event occurs in association with the first context, wherein the first prediction model is trained using historical interactions of the user with the computing device after the event is detected under different contexts; providing the user interface to the user for interacting with the set of one or more applications, wherein the user interface is provided on a lock screen of the computing device, the user interface allowing selection of one of the set of applications from the lock screen; determining whether a threshold period of time has elapsed; removing the user interface when it is determined that the threshold period of time has elapsed; determining whether the user seeks to access the set of one or more applications when it is determined that the threshold period of time has not elapsed; and running the set of one or more applications when it is determined that the user seeks to access the set of one or more applications, wherein functionality of a selected one of the set of applications provided on the lock screen is limited until the user is authenticated.