Policy-Carrying Data: A Privacy Abstraction for Attaching Terms of Service to Mobile Data
Calibrating Noise to Sensitivity in Private Data Analysis