Evaluating current ethical values of OpenStreetMap using value sensitive design

ABSTRACT The crowdsourced OpenStreetMap mapping platform is utilized by countless stakeholders worldwide for various purposes and applications. Individuals, researchers, governments, commercial, and humanitarian organizations, in addition to the engineers, professionals, and technical developers, use OpenStreetMap both as data contributors and consumers. The storage, usage, and integration of volunteered geographical data in software applications often create complex ethical dilemmas and values regarding the relationships between different categories of stakeholders. It is therefore common for moral preferences of stakeholders to be neglected. This paper investigates the integration of ethical values in OpenStreetMap using the value sensitive design methodology that examines technical, empirical, and conceptual aspects at each design stage. We use the Humanitarian OpenStreetMap Team, an existing volunteered geographic information initiative, as a case study. Our investigation shows that although OpenStreetMap does integrate ethical values in its organizational structure, a deeper understanding of its direct and indirect stakeholders’ perspectives is still required. This study is expected to assist organizations that contribute to or use OpenStreetMap in recognizing and preserving existing and important ethical values. To the best of our knowledge, this is the first attempt to evaluate ethical values methodically and comprehensively in the design process of the OpenStreetMap platform.


Introduction
Traditionally, mapping processes were performed by experienced professionals using standard land surveying and mapping methods, while national mapping agencies played a pivotal in providing authoritative mapping infrastructures.In most cases, achieving even moderately accurate measurements required the use of expensive professional equipment (Haklay, and Weber 2008).Nowadays, however, due to budget and time constraints, and lack of manpower, the authorities are not always able to provide adequate data to produce comprehensive and timely mapping infrastructures (Olteanu-raimond et al. 2017).
Around the year 2000, the Geographic World Wide Web (GeoWeb) for mapping applications matured, enabling the sharing of geospatial information over the Internet between data contributors and consumers.As a result, innovative location-based applications were significantly enhanced (Haklay, Singleton, and Parker 2008), as were mapping infrastructures that were based on data contributed by volunteers.The renowned OpenStreetMap (OSM) is probably the most prominent example that promotes Volunteered Geographic Information (VGI) campaigns, having today more than five million active registered contributors.
Despite the many merits of OSM, the storage, usage, and integration of this data in software applications often create a complex ethical dilemma regarding the relationship between the contributors and the consumers, from both legal and ethical point-of-view.As the number and scope of OSM projects and participants continue to rise, examining these issues becomes imperative.Ethical values may be negatively impacted by innovative technological developments, such as OSM-based technological work paradigms, due to a conflict of interest between the ethical values of the various stakeholders involved.One type of conflict exists between the value of the security of contributor's personal information and privacy of the individual and the value of the usability and availability of the data provided by that person.Nowadays, it is possible to identify and expose private information about the volunteers based on the spatial data and information they provide, e.g. a person's financial status, lifestyle, and health (Doytsher, Galon, and Kanza 2012).In Ahmouda, Hochmair and Cvetojevic (2018), patterns of OSM contributors and Twitter users were used to explore whether a contributor is local or non-local.The authors state that such information might not be available in the future resulting from new data protection CONTACT Sagi Dalyot dalyot@technion.ac.il disaster risk reduction, poverty elimination, and sanitation access.HOT performs its work through OSM, reinforces the global use of OSM, and supports creating local OSM communities (https://www.hotosm.org/what-we-do).To carry out the investigation, the Value Sensitive Design (VSD) methodology is introduceda technique for integrating ethical issues and values into the design process that examines technical, empirical, and conceptual aspects at each design stage.This framework was first applied in the fields of information systems (Friedman et al. 2013) and human-computer interaction (Borning and Muller 2012).Integrating VSD for ethical purposes offers several significant contributions, including the integration of privacy by design, for example, as suggested by Cavoukian (2010).This study discusses the importance of identifying all relevant direct and indirect stakeholders, as a basis to analyze their ethical principles and possible conflicts of interest between their values, potential benefits, and possible harms they might incur -as a result of engaging in a specific OSM-based project or technology.By doing so as early as the planning stage, full integration of ethical values can be ensured, or at least enhanced, enabling compliance with these important values and principles rather than having to make compromises.This study is expected to assist organizations that contribute to or use OSM, such as national mapping agencies that consider promoting the use of contributed geographic information, in recognizing and preserving existing and important ethical values.

OpenStreetmap
OSM is considered as an exemplary and proxy of a VGI project (Antoniou and Skopeliti 2017), collaboratively created and supported by mappers who volunteer and maintain mapping data.OSM contribution patterns vary by time, country, and type of contributor.For example, Ahmouda, Hochmair, and Cvetojevic (2018) showed that higher proportion of volunteers signed up for OSM during the earthquakes that took place in central Italy in 2015 and Nepal in 2016.The authors also concluded that contributors in Italy were more experienced than contributors in Nepal.Differences in these areas have ethical implications.Despite the popularity of OSM, its reliability and accuracy are still questioned and widely studied (Basiri et al. 2016;Hashemi et al. 2015;Salk et al. 2016), which led to the emergence of various methodologies and software for assessing data quality of OSM (Amirian et al. 2015;Arsanjani et al. 2015;Fan et al. 2014) and assessing the correlation of the above by characterizing participants' behaviors (Bégin and Roche 2017).Still, some aspects of OSM are often less discussed in current research.
As the popularity of OSM increases, studies are still missing on the integration of ethical values of the various stakeholder groups involved in OSM.

Privacy and interests of geographic information volunteers
The literature on ethical issues within the VGI context is limited.Mooney et al. (2017) explain how issues regarding the involvement of stakeholders in VGI-related projects can be categorized into three main groups: privacy, ethical, and legal aspects.For example, researchers wishing to employ VGI data should consider the ethical aspects by ensuring that the volunteers are aware of relevant risks and benefits following their participation in the data collection.Cho (2014) also addresses concerns following the employment of user-generated geospatial data, including the issue of: "ownership: intellectual property and moral rights" (4).The author suggests ways to remove any data that may infringe on copyrights, by statements such as: "to prevent further infringement" and to use "disclaimers to alert users to the limitations of the data . . .and prevent litigation".
Privacy in general, and information privacy in particular, should be addressed in VGI-based systems.Smith et al. (2011) review several books and articles on information privacy and conclude that while information privacy has been widely studied, the findings and theories are not comprehensive to make a significant contribution to the field.Moreover, with regard to values, the authors differentiate between privacy as an economic commodity and privacy as a right, and add that despite their similarities, privacy and ethics are not the same.
To ensure the security of the contributors, their private and personal information must be protected from attacks, hackers, wireless threats, or unauthorized access.However, once volunteers provide geospatial and other types of information via their mobile phones, all other data stored on their phones may be at risk of exposure (Elwood, and Leszczynski 2011).The literature suggests several approaches to preserving the volunteers' personal information security.Miles (2017), for example, suggests establishing a private blockchain for keeping transaction data secure and recommends integrating encryption technologies (i.e.converting information into a code) within a security infrastructure.Since 25 th May 2018, the General Data Protection Regulation (GDPR) has been enforced in the European Union for protecting data subject rights (i.e.protecting the people who collected and contributed the data that is being used by an organization), based on the following European Commission right: "Everyone has the right to the protection of his personal data" (Regulation, 2016(Regulation, /679 2016)).In line with these acts and regulations, the security of the volunteers' personal information must be regulated and guaranteed in VGI projects.
Location privacy (or geoprivacy) in applications and User Interfaces (UI) are discussed in literature.In an experiment conducted by Ataei, Degbelo, and Kray (2018), a UI was created to enable users to control their location privacy preferences, to be able to decide when, where, and with whom to share their location.Their experiment was based on principles that stemmed from a range of models: privacy of individual users (Westin 2003), privacy by design (Cavoukian 2010), and principles of interactive technology (Shneiderman and Plaisant 2010).The results of the experiment, in which twenty-three educated participants took part through online channels, showed that the specific UI for managing location privacy provided users with an increased sense of control.Intending to check the degree of user engagement in an application as a function of information transparency and personalization, Chen and Sundar (2018) conducted a pilot study with more than 300 participants using the GreenByMe eco-friendly mobile application.Their findings showed that overt personalization, enabling users to control their location privacy settings and increased transparency, increases users' confidence, decreases users' privacy concerns, and increases their engagement and acceptance of the technology.Schmidt (2013) presents challenges in four categories of crowdsourcing and states that a code of ethics must be developed for protecting the rights of stakeholders belonging to each category.In his criticism of the lack of enforcing important ethical values, Schmidt writes in p.4: " . . .all is not well in the world of crowdsourcing at the moment, especially concerning fairness, respect and economical sustainability for the contributors".The author concludes by stating that while crowdsourcing will always entail some degree of exploitation, all stakeholders combined must develop criteria that define what is considered fair implementation of crowd work that ensures standardized fair labor.These statements are in line with the VSD concept (Zhang and Galletta 2006) that addresses the importance of identifying all direct and indirect stakeholders involved, as well as the potential benefits and harm that may be incurred by each one of them.Zhang and Galletta (2006) provide practical guidelines for enabling researchers and designers to incorporate ethical and moral values while taking into consideration the complexity and delicacy of social relations.To create this framework, the researchers conducted three case studies: "information and control of web browser cookies, . . .high-definition plasma displays in an office environment to provide a window to the outside world, . . .integrated land use, transportation, and environmental simulation system to support public" (p.2).According to the results, the authors set practical implications for integrating VSD, which are outlined in the next chapter.Bynum (2017) presents a more philosophical approach to the topic, claiming that ethics of information will necessarily have to continue to change and evolve, because of the continuous technological developments that lead to numerous new policy vacuums (which also include ethical challenges).This supports the statement by Friedman and Kahn: " . . .how such values play out in a particular culture at a particular point in time can vary, sometimes considerably".(Friedman and Kahn 2007).

Ethics, ethical codes and practices
An additional ethical challenge relates to the reliability of the data.Incorrect or biased information can be difficult to identify and could cause serious harm and it is hard to relay these risks to stakeholders.This ethical issue could lead to real danger, in the case of a largescale disaster, for example, if rescue teams are only able to reach a small number of people -because of incorrect mapping data.The consequences of providing incorrect data according to Mooney et al. (2017) include: misleading citizens and authorities and delaying VGI-based projects, harming the lives of others, and lack of trust in the quality and usability of VGI systems.
Since VGI is often associated with geographicoriented crowdsourcing and wisdom-of-the-crowd initiatives, Dror, Dalyot, and Doytsher (2015) discuss and characterize the differences between the two.The authors classify several acknowledged and sociallydriven mapping and location-based services according to eight indices, which are closely linked to ethics, namely: diversity, decentralization, independence, aggregation, knowledge, activity, privacy, and exploitation.The authors conclude that the privacy of volunteers must be guaranteed; data should be contributed willingly and independently without being influenced by other people's opinions; and, contributed data must be in a field with which the contributor is familiar and knowledgeable.Meng (2020) provides an analytical review of the mutually changing roles and responsibilities of humans and technologies according to four main aspects: informing, enabling, engaging, and empowering.The review prompts several challenges when human-technology collaboration is at hand, stating that, among others, the ethical concerns for the handling of large geographic data volumes, some of which are contributed, cover not only the sensitive issues related to, e.g.privacy violation, but also to questions of keeping the technological character within its constructive sphere of societal influence.Standing and Standing (2018) propose specific guidelines for incorporating important ethical values in crowdsourcing projects -ensuring that the volunteers are not being exploited -based on case studies and the existing literature, and in terms of relational, economic, and knowledge-related outcomes.For example, while companies may choose to implement crowdsourcing as a means of decreasing expenses, they should pay the volunteers a certain fee, or at least inform them of their Intellectual Property (IP) rights.
It is important to understand what the term value refers to.The Business Dictionary (2019) defines values as "important and lasting beliefs or ideals shared by the members of a culture about what is good or bad and desirable or undesirable.Values have a major influence on a person's behavior and attitude and serve as broad guidelines in all situations.Some common business values are fairness, innovation and community involvement".As values vary between different individuals, corporations, and cultures, we suggest classifying them into two groups: personal values and corporate values.Moreover, it is important to emphasize key values that must not be compromised, such as security, health, quality, and company principles that reflect the organization's philosophy.Such values differ among various stakeholders.The advantage of the VSD methodology is that it takes into account these key values and the various stakeholders.
While the literature does offer several guidelines for introducing ethical values into the design stage, these are missing for VGI-related projects.Accordingly, our research focuses on the renowned OSM, which although maintained by the public, serves numerous technologies and services.

Methodology
In most cases, ethical values are analyzed in a conceptual and theoretical manner, rather than being translated and modeled into an unambiguous process that can ensure their actual implementation.VSD methodology bridges existing modeling gaps as it analyzes conceptual, empirical, and technological aspects of design, investigate stakeholders' values methodically and identifies value tensions.Our study utilizes the VSD methodology to enable the integration of ethical aspects during the planning stages of a VGI-project.Zhang and Galletta (2006) present ten practical steps (stages) of the VSD methodology (Figure 1) adopted in this study.The conceptual analysis of VSD focuses on determining and investigating values based on literature and stakeholders' preferences.The empirical analysis turns the evaluated values at the conceptual stage into design requirements.
Technical investigations evaluate whether the development restrictions maintain or neglect the values and the design requirements.We investigate projects that rely on OSM (data) according to the OSM codes of conduct while mapping conflicts between the values of different stakeholders.

Stage 1: defining the investigated technologies
The conceptual investigation of VSD defines the relevant values based on both literature and stakeholders' preferences.To identify the most  important ethical values for OSM-based systems, we examined the values presented in Huldtgren (2015) in the field of Information and Communication Technologies (ICT), since both ICT and OSM allow people to update digital data and become involved through the Internet and mobile devices.Moreover, both ICT and OSM enable the storage, access, and transmission of data, and involve personal, organizational, and socio-ethical aspects, risks, and benefits.Based on this, we chose to include, among others, the values depicted on the left of Figure 2.With regards to spatial mapping, especially through OSM, it is also important to add the ethical values depicted in the middle of Figure 2. In response to the criticism of VSD, Friedman and Hendry (2019) state that VSD has to be constrained to at least the three universal values, depicted on the right of Figure 2. A list that includes all the ethical values of OSM and justifications for pointing them out is missing.In this regard, OSM's main values were inferred from OSM's moral clauses and were compared to the values we chose in Stages 3 + 4. The technical investigation was made in Stages 7 + 8, where the effect and the limitations on the identified values were examined using the case study.Empirical investigation (at Stages 9 and 10) assesses stakeholders' values and turns them into practical requirements through designing a technology.

Stage 2: identifying the direct and indirect stakeholders
A stakeholder is any party with an interest, in this case VGI.Numerous stakeholders are involved in OSM-based projects, which are complicated and lengthy processes that entail collecting, evaluating, and processing the data, achieving relevant information, creating user interfaces, providing users with the information, maintaining and updating the system, and more.A list of OSM-based services is published on the OSM wiki website (see Appendix B for relevant OSM links).This list presents applications that rely on OSM data and information, describes their functionalities, and categorizes them according to different fields like history, archeology, indoor navigation and mapping, routing, accessibility for persons with disabilities, public transport, and many others.
Building on the definitions of Mooney and Minghini et al. (2017), we mapped the various stakeholders and divided them into three groups, presented in Table 1, together with their affinity to the different relevant values."V" depicts where a stakeholder expects to receive a value, while 'X' indicates that a stakeholder is required to comply with a value.A blank cell indicates that there exists no affinity.The three stakeholder groups are: (1) Contributors of data and information: this group is directly involved and shows interest in VGI, and is composed of citizens, commercial mapping companies, regional mapping authorities, and competitors.(2) Users/customers: citizens, commercial mapping companies, regional mapping authorities, and competitors.(3) All others, including indirect stakeholders: people who neither contribute nor use the information, such as employer/owners' management, employees, development colleagues and partners, the media, scientists, and researchers.
While all parties involved in OSM-based projects must act ethically, we focused here on seven main stakeholders: contributors; customers/users; the public; local mapping agencies and land surveyors; academic researchers (who use the contributed information for research purposes and for improving geographical information systems); engineers and other professionals (who establish and maintain OSM-based systems); and businesses (that provide OSM services).Although some stakeholder groups' interests could potentially conflict with those of other stakeholders, e.g.contributors and users, this categorization of stakeholders provided by OSM facilitates evaluating the integrated ethical aspects using the VSD framework.OSM allocates different codes of conduct to different groups of stakeholders, which align with VSD.
Outline: analyzing Stage 2, we did not find indications that OSM stakeholders were involved in formulating ethical guidelines.We therefore recommend that stakeholders' perspectives should be revealed and considered before updating ethical guidance or creating new ones.Representatives of different stakeholder groups should participate in establishing the various codes of ethics related to OSM either by answering questionnaires, semistructured interviews, sketching activities, election methods, or other methods suggested in Friedman, Hendry, and Borning (2017).

Stages 3 + 4: identifying the benefits and potential harm to stakeholders and values
These two stages are explained by presenting ethical issues that are specific to integrating OSM into software programs, applications, or organizations, such as HOT.Since OSM has several codes of conduct, including drafts and suggested codes that underline various aspects, we highlight only relevant OSM clauses that relate to the investigated values (see Table A1).For detailed analysis see Table A2, where the clauses are examined against the interests and expectations of the three groups of stakeholders.

Mutual relationships between contributors
Community Code of Conduct (Draft) contains the code of conduct for OSM Mailing lists and Code of conduct/State of the Map (short) focus on the expected behavior between data contributors and members of OSM, such as mutual respect, collaboration, transparency, sharing knowledge, dealing with disagreements, avoiding violation and harassment, etc. (see clauses (1), ( 2) and (3) in Table A1).

Data integrity
"Good Practice" (https://wiki.openstreetmap.org/wiki/Good_practice) guidelines focus on data quality but it is not obligatory: "Nobody is forced to obey them.There might be cases where these guidelines don't apply or even contradict each other"."Good Practice" asks the contributors to avoid mapping unverifiable features, such as historic events, historic features without ruins, temporary events, and temporary features."Good Practice" relates also to data precision and reliability.Clauses (4), ( 5), and (6) in Table A1 are relevant examples.In the wiki page of data OSM contributors, global and national publishers who give consent to including their data in OSM are listed.However, they explicitly do not provide guarantees regarding the provided data.For illustration, see clause (7) in Table A1.

Stakeholders' interest, involvement, and consciousness
The reviewed codes of ethics cover a range of stakeholders; however, questions should be asked regarding the involvement of stakeholders in the process of writing this ethical guidance, whether their interests were sufficiently emphasized and whether they were inquired for determining their preferable values.Still, OSM informs contributors on the importance of their role and the interests society achieves as a result of their contribution (see clauses ( 8) and ( 9) in Table A1).As stated in OSM FAQ, for example, data bought from commercial maps may not be up-to-date, while OSM is believed to be continuously updated by volunteers (see clause (10) in Table A1).
Outline: analyzing Stages 3 + 4, we conclude that OSM clauses relate to a wide variety of stakeholders' values, interests, and responsibilities.However, there is no indication that stakeholders took part in setting these clauses.As depicted in Table A1, the values that we highlighted in the previous stages partially comply with the existing literature and OSM clauses, and conflicts between these clauses and the assessed values of stakeholders were identified in Table A1.

Defining who can contribute data
It is important to look after the common good, i.e. members of the public who use the OSM-based service.
As data is contributed by different people and from different communities, one must ensure that those contributing data are indeed knowledgeable enough to make this contribution.Otherwise, the contributed data could harm the public and the data consumers.If OSM projects lack mechanisms for ensuring the reliability of the data contributed, the public's right to correct and proper data will likely be denied.In this aspect, OSM emphasizes the importance of data quality, verifiability, and error correction through its code of conduct "Good Practice", which also specifies editing standards.However, "Good Practice" guidelines are not obligatory, as mentioned earlier in the analysis of Stages 3 + 4.

Professionalism and impartial for the benefit of the common good
Organizations that deal in VGI must be skilled and impartial toward any sources of funding.
There could exist a conflict between a person's well-being and trust, the availability and the usability of the data.Otherwise, contributors could provide, e.g.partial information about all gas stations in the area by mentioning a specific chain of gas stations for personal financial benefit rather than for the benefit of the public.In this aspect, HOT guidelines require HOT members to "not accept or seek financial or other gains beyond the representative value resulting from affiliation with HOT, except in compliance with HOT guiding and policy documents".Besides, it requires members to "not use the name, trademarks, products developed and/or services provided by HOT for personal individual benefit".

Informed consent, passiveness, preserving the privacy and information security of others
Informed consent of data volunteers is the foundation of ethical research, ensuring that volunteers are aware and informed about the risks relating to their contributed information.This prohibits the use of other people's temporal or spatial information without receiving their consent.In this context, OSM prevents its users from using copyrighted data or "any other proprietary data" (https://wiki.openstreetmap.org/wiki/Copyright).In the OpenStreetMap Contributor Terms 1.2.4,(https://wiki.osmfoundation.org/wiki/Licence/Contributor_Terms)contributors agree on respecting "the intellectual property rights of others".Being aware of providing information and preserving a person's privacy and information security is not always guaranteed in location-based applications, which usually require users to sign an agreement for providing location data, yet most users are not aware of just how much information can be achieved based solely on a person's location.OSM explains the reasons why it stores and processes personal data in its Privacy Policy.On one hand, OSM stores different sorts of data, such as editing sessions meta-data, user ID, e-mail address, and IP address, which are mostly accessible only to operational personnel of OSM.Besides, OSM automatically collects information about the visitors of "OSMFoundation" (www.osmfoundation.org)website based on their APIs, including: (a) IP address, (b) browser and device type, (c) operating system, (d) referring web page, (e) the date and time of page visits, and (f) the pages accessed on our websites.On the other hand, in its privacy policy (https://wiki.osmfoundation.org/wiki/Privacy_Policy),OSM offers a "not required by law" mechanism for restraining privacy-related issues, and it also provides its users the "right to object against the processing based on legitimate interests of the data controller".Besides, there exists optional information that users may decide not to provide, such as home address.

Intimacy
The term intimacy refers to the closeness between individuals or groups of people and enables volunteers to work with one another in an easy-going, trustful, and close environment.Intimacy also allows contributors to detect the level of information required based on the different audiences that may wish to access this information.However, intimacy could be threatened by OSMbased applications, if contributed data is used by undesirable users.OSM manages the interaction and etiquette between its users through its "Community Code of Conduct (Draft)", its wiki page "Etiquette" and its "Suggested code of conduct for OpenStreetMap Mailing lists".

Anonymity
Contributors' anonymity is key to OSM-based projects, especially once a contributor's identification is revealed, while this cannot be reversed and undone (Sula 2016).Therefore, anonymization is required to restrict the mining of the contributed data -a process that is essential for building comprehensive information systems and other needs.To solve this gap, Li, Palanisamy, and Krishnamurthy (2018) suggest a range of techniques for multi-level privacy-preserving that only enables access to data that is specifically needed, while simultaneously preventing the use of that data for additional purposes.OSM does not allow anonymous edits and contributions, but it does allow contributors to log in with non-identifying names and to change them whenever they want.OSM anonymizes survey data before making it public and enables third parties to utilize this data for specific reasons, such as research.However, these anonymized data "may be useful to the Foundation in the future for comparison purposes, may be retained indefinitely under applicable data privacy laws".
Outline: analyzing Stage 5, we conclude that OSM handles the analyzed values; however, gaps related to, e.g.anonymity and intimacy, still exist, hence practical solutions for bridging these should be handled by OSM (some solutions are suggested in the literature review).

Stage 6: identifying potential conflicts among the values
Conflicts are identified in considering the analysis in the previous stages, such as in Table A2.Conflicts can also be related to the technology and digital divide of the world.For example, collecting data from users creates a technological gap between different places in the world.People in developed regions have greater access to technology and can continually contribute data, thereby improving related services, while people in developing regions have less access to technology, rendering them less able to contribute data and improve the technological systems from which they benefit.Although the developed regions are at an advantage, the contributed data could have a negative environmental impact, as natural resources become visible and exploited, thus making the developing regions at an advantage in this context.Another conflict is reflected by national mapping agencies contributing to OSM: for one, their contributions boost human well-being, however, they are interested in maintaining government funds for their work.A few other conflicts among privacy and the values of anonymity and responsibility are extended and explained.

Privacy
Preserving privacy is a key value for ensuring a continuous flow of volunteer contributors over time.If people worry that their privacy is in jeopardy, they will avoid contributing data.Yet, if people have a strong feeling of privacy, they will probably also develop a feeling of trust in the system and cooperate more willingly and efficiently.However, at certain stages, privacy concerns might be in conflict with other values, such as informed consent when providing geo-spatial data.Moreover, even if privacy and anonymity are ensured at present, they could be integrated into other databases in the future, leading to certain personal details being revealed (e.g.Shen et al. 2016).As with other VGI-based systems, OSM stores and processes personal data, while edits made by a specific user are visible to all, including user ID, editing timestamps, links for cross-reference, etc. Editing programs, such as JOSM, make additional data available, like the user's language settings.Therefore, creative approaches must be designed and developed to ensure contributors' privacy, without harming the rights of the interested parties, and to prevent clever manipulations and deceptions that may convey a false feeling of privacy.

Anonymity
Anonymity provides a feeling of security and confidence of not being traced.Although OSM enables contributors to choose non-identifying login names, it does not accept anonymous contributors.OSM holds non-geographic information about volunteers, for the reasons of improving its service, contacting them for further questions, banning violations, enabling collaboration between contributors, and evaluating the integrity of data.Although to some extent anonymity is disrupted, evidence shows that the trust in OSM increases as is evident by the growing number of contributors and users.

Responsibility
Individual data volunteers or NMA contributors usually do not grant warranties on data completeness, accuracy, and timeliness, and they are not responsible for decisions that users make based on the contributed data (see Table A1).This is important for the sustainability of contributors, since if they hold such accountability, they may hesitate to contribute data.All the same, this fact results in a less trustworthy feeling upon users who expect to receive reliable data.The OSM codes of conduct balance this issue by emphasizing the importance of reliability and data correctness.
Outline: analyzing Stage 6, we conclude that conflicts exist between moral values and principles in OSM.Therefore, we suggest that, as proposed in VSD, OSM iteratively map and identifies them during its continuous development in an attempt to minimize them.

Stages 7 + 8: integrating and assessing moral considerations into the company's organizational structure
The moral considerations of organizations that use OSM data are reviewed about HOT.The HOT's Membership Code of Conduct requires "HOT Associates", including "members, volunteers, contractors, and other contributors", to oblige (1) HOT, (2) colleagues, partners, donors, and beneficiaries, and (3) Society.We review the HOT membership code of conduct to identify the values it considers and lacks.Table A3 in appendix A shows the values that HOT members should commit to; these values are derived from the clauses in the HOT code of conducts, which mainly focuses on "openness, collaboration and participation" (https://www.hotosm.org/code-of-conduct).In Table A3, clause numbers are given, where each number is accompanied by the values derived from the specific clause.
Besides, HOT published its privacy policy, which considers users' preferences and rights.In addition, in "Community Types and Roles", HOT lists the different community roles it has and the ways they are expected to contribute.For example, the connectors'/teachers' tasks focus on sharing their knowledge with less experienced contributors, outreaching, and training them.The mappers' role centers on detecting required mapping activities, recruiting, and connecting potential contributors.Mission supporters are responsible for developing policy membership and codes of conduct, i.e. sustaining ethics.These, and other roles, enrich OSM and expand its outreach, which contributes to humanity and people's well-being.This shows that the HOT organization integrates moral consideration into its structure.OSM also integrates such considerations through its various codes of conduct and guidelines.
Outline: analyzing Stages 7 + 8, in general, HOT's policies correspond with OSM policies, as they both have the common purpose of enabling free mapping for human wellbeing, each of them defines the relationship between its members and considers privacy aspects.However, after reviewing HOT's official webpage, we miss published guides on data completeness, accuracy, timeliness, etc. HOT service may conflict with commercial mapping agencies, whose primary principle is income.We suggest official organizations, which are involved with OSM and directly affect its work, adopt OSM ethical considerations in their organizational structure.

Stage 9: interviewing stakeholders
In line with the stages of VSD (Friedman, Hendry, and Borning 2017), when interviewing stakeholders, the interviewer should prepare basic questions in advance.During the interview, more in-depth questions of why can be asked to provide additional data and information.Why questions require the interviewees to keep talking, revealing further input about their beliefs and attitudes regarding the ethical value in question.The researchers also recommend asking indirect questions, about their lifestyles or behavior in specific situations, for example, to reveal additional attitudes and rights.Interviewees can also be asked to solve a certain task with the same purpose.
In this context, we disseminated a questionnaire to reveal the value preferences of contributors and customers of volunteered data.The focus group included 25 land surveyors and land surveying students.They were asked several questions on various aspects related to their role as data contributors and consumers (in line with the category they belong to in Table A2 in the Appendix).We explicitly asked them to rank their preferred values when dealing with a system that relies on volunteered data and asked indirect questions that aim to expose their values by determining their behavior in dilemmas related to these systems.Responses to the closed questions reflected their appreciation of public good value, data quality, reliability, and trustworthiness.However, their trust in volunteered data for statutory use decreases, and their doubts about using the system both as data contributors and consumers if their privacy is not guaranteed.The questionnaire also included an open question related to their willingness to contribute, which in most cases the answer contradicted their approach as stated in the previous closed questions.This implies that their answers might not reflect their real intentions.
Outline: analyzing Stage 9, the values that land surveyors emphasized are compatible with several suggested values in stage 1, such as privacy, reliability, and people's wellbeing.We recommend that OSM conducts semistructured interviews and questionnaires for a deeper understanding of its direct and indirect stakeholders' perspectives to update its ethical guidelines accordingly.

Stage 10: discussion and heuristics for technical investigations
In line with the previous stages, it is obvious that the frequent technological developments must be specifically addressed from an ethical point of view during the project's lifecycle, to incorporate the continuation of the technological development and the social contribution.All stakeholders must behave ethically, from the initial stages of setting up the system and throughout the entire process.Integrating ethics in the design is among the primary purposes of VSD.Table 2 highlights the current state of ethical aspects in the different stages of the lifecycle of OSM projects along with our recommendations for each stage.

Discussion and conclusion
We investigated and analyzed the implementation of VSD in the design of OSM-based projects.We mainly focused on the stakeholders involved in the process of creating and using OSM data and their rights, where future research will apply additional iterations of VSD methodology in OSM projects.We conclude that ethical aspects of OSM partially comply with VSD; the values highlighted in OSM's codes-of-ethics meet some of the requirements that appear in literature, while some were suggested by us in stage 1.Other gaps between the existing OSM's ethical aspects and the VSD investigation were identified.Actions should be taken to bridge these gaps, such as the need to reveal the stakeholders' value preferences and integrate them into the different codes of ethics.Conflicts between moral values and principles exist in OSM; iterative mapping and identifying of the values may be pursued to overcome existing conflicts.Some solutions for ensuring specific values, revealing the stakeholders' perspectives, and involving them in creating ethical guidance are suggested.Finally, we recommend that official organizations engaged with OSM adopt OSM ethical considerations in their organizational structure to overcome existing gaps in ethical values.
Investigation of key values in the fifth stage of VSD is focused on the importance of privacy and its priority among other values that it may conflict with.Hence, it is necessary to conduct future research for proposing and implementing new methodologies for guaranteeing rigorous privacy, especially because previous studies proved the possibility of circumventing existing privacy preservation practices.Reliability OSM data could be improved and assured by various methods, where OSM projects have the potential to compete with authoritative geospatial data infrastructures or with commercial ones, such that it may enter other scientific fields, further enabling data distribution and diversity.Despite the many merits and significant contributions related to OSM, we conclude that properly handling ethical values should be integrated into the lifecycle of OSM, where we suggested key guidelines to achieve this.
VSD in OSM demonstrates considerable value since it can deal with the diversity of resources and stakeholders involved, which allows understanding of the different attitudes, needs, and expectations.We expect that customary sessions with stakeholders' representatives, where they can express their positions and share their standpoints, could effectively enhance the outcome of integrating VSD.VSD is beyond theory and concepts.It has applicable aspects, such as integrating values in organizations; however, we believe that VSD cannot deeply analyze technological developments.Besides, VSD does not cover all the relevant issues relevant to OSM, and additional aspects need to be analyzed.For example, country disparities and the aim of a specific project may change the priorities of rights and ethical principles.Evaluating interviewers (data contributors, project coordinates, and interested parties) needs to be embedded in VSD; before identifying them, it is essential to verify whether they are expected to make it difficult to protect the ethical values and rights of different participants, or not.
To the best of our knowledge, this is the first attempt to methodically integrate VSD in OSM-based projects.The VSD methodology could be later applied by other developers who work in the VGI field for future design and development, where the stakeholders should be interviewed before the final stages of planned updates for fitting the upcoming progress to their needs and values.The VSD perspective is defined to be iterative, meaning that modifications in OSM-based technology design are expected after applying the stages of VSD and after identifying the conflicting values, while the VSD process should be implemented again to assuring that fewer conflicts after the modifications were • OSM pays attention to defining the data sources for the system and to preventing the use of personal information by another entity by preventing the import of copyrighted data.
• OSM and HOT explicitly define their purposes of collecting and assimilating data.
• In its privacy policy, OSM defines the scope of stored and processed data, the reasons for storing and processing it, and mechanisms that contributors can follow for reducing "privacy related issues".

Recommendation:
• Revisiting the definition so it must be coherent that the system uses only information that is vital and directly related to any research or software that makes use of OSM data.
• Ascertaining users are aware that using data that is beyond the scope of the project impacts the participants' privacy.

Planning stage
Currently: • At present, projects are often developed without the knowledge of the participants, especially as acquiring data is very simple.Since OSM is freely accessible, it seems unrealistic to inform contributors of each conducted project or research that use their input, although they own the data according to OSM definition.
• In OSM, the different stakeholders are not involved in making policies and detecting values.

Recommendation:
• Contributors' representatives should be involved in the plan- ning stage.
• Those involved in the planning must identify, define, and relate to ethical, financial, cultural, legal, and environmental issues associated with the project while considering the preferences of stakeholders.

Production and execution stage
Currently: • OSM has de rigueur guidance regarding data quality and relia- bility, while no such published guidance by HOT was found.

Recommendation:
• Projects should be in accordance to shared professional stan- dards.Moreover, volunteered data must be trustworthy and reliable.
implemented.The contribution of this research is in proving the indispensability of integrating ethical values in OSM, where we believe it will further contribute to the many qualities of OSM and its global social footprint.

Disclosure statement
No potential conflict of interest was reported by the author(s).

Notes on contributors
Ruba Jaljolie is a PhD candidate at the Department of Mapping and Geoinformation Engineering, The Technion.Her research is on multi-dimensional land management systems (MLMS), where she develops algorithms, models, and processes for expanding existing 2D land management systems into MLMS.She also focuses on the perspective of diverse stakeholders and experts who use MLMS, investigating the ethical dilemmas related to data collection and the integration of volunteered geographic information in MLMS.The contributor is interested in providing spatial data to add to (society's) well-being by upgrading existing mapping infrastructures and with the understanding that the more volunteers contribute, the greater the improvement will be.(y8,9) An additional motive is the aspiration to share one's knowledge with others, based on mutual respect.(y1)

Talia
The contributor must be reliable and honest when submitting data; the data contributed must be up-todate and precise.(y4,5,6) The contributor will not harm the privacy of other people when providing data (Mooney et al. 2017) (y3) Local mapping agencies and surveyors (government The agency is interested in preserving its assets, i.e. mapping data (achieved through the investment of time and resources).(n9) The agency is not interested in offering its propriety data, as it is a source of knowledge and power for the agency, that comprises its self-identity over time.(n2) The organization will consider the content and degree of detail of the data that it provides its customers with (Mooney et al. 2017).(n14) The organization will continuously update the information and will provide reliable and quality content.To receive explicit permission from the contributors to access their data.To ensure that the contributors are fully aware of the fact that they are participating in a research project.(n12) To not expose the identity of the research participants (volunteers) or any other personal data; maintaining privacy and anonymity (Mooney et al. 2017).(y13) To solely use the data for the intended research purpose.The data will only be kept for the period of the study and will then be deleted permanently.(n13) The information will not be shared with a third party who is not part of the research.

Commercial Mapping Businesses
The business is interested in preserving its assets, therefore, prefers not to expose data for which it may be able to receive payment in the future.( y8), (n9) The commercial company wishes to create trust among the users and market its activities.(n10) To only accept tasks that the company can handle professionally and expertly (Brinkman et al. 2017).To only provide data that is correct/accurate/reliable/up-to -date.(n14) Users/Customers Citizens To receive as reliable, precise, and comprehensive data as possible.To use OSM-maps for their wellbeing, and with a feeling of liberty and freedom.(y9) Receiving data without harming their privacy.Receiving up-to-date data in real-time.(y10) Using the data while being aware of the purpose of the mapping infrastructure activity, and of the data contribution community, so as not to harm its activity.Using the data while being aware of preserving the privacy of the entities involved.(n12)

Commercial Mapping Businesses
The business is interested in expanding its existing database and continuously updating it to profit from the data.(y16) Not using data in a way that could harm people or cause them to perjure themselves.Being professional and objective when providing consultancy based on the received data (Mooney et al. 2017).Approaching communication and computerized sources only with the company's authorization (Brinkman et al. 2017).

All Other Stakeholders Engineers and Professionals who Develop and Maintain OSM-based Systems
Companies that set up OSM systems are interested in promoting a vision that contributes to people's wellbeing (otherwise volunteers will not cooperate).The company believes that the data needs to be usable and available to all, aspiring to provide others with greater liberty, while freeing them from being dependent on a commercial or government source.(y8) Utilizing the existing resources most effectively.Willing to provide professional, honest, and independent assistance regarding social issues.(y17) Not approving products achieved through processes they were not involved in or supervised by them or products beyond their scope of expertise.Always using computers in a manner that ensures honoring and being considerate of other people (Illinois Institute of Technology (IIT) 2011).
Table A2 empirically compares the clauses cited in Table A1 within the stakeholders' potential expectations and requirements in literature.Next to the mapped expectation/requirements, reference numbers of those clauses appear."n" indicates that the value does not comply with the existing literature and presents an identified conflict between these clauses and the assessed values of stakeholders, while "y" indicates the opposite.
Dror is a PhD candidate at the Department of Mapping and Geoinformation Engineering, The Technion.Her research is on social location-based services, where she investigates the use of historical data for augmenting user-generated maps.She develops algorithms and spatial models for improving the accuracy of OpenStreetMap data.David N. Siriba is a Full Member of the Institution of Surveyors of Kenya and is a licensed Land Surveyor.Currently, he is a Senior Lecturer in the Department of Geospatial and Space Technology at the University of Nairobi responsible for coordinating the Master of GIS degree programme.He is involved in research on the following themes among others: various aspects of volunteered geographic information systems; use of social media for traffic incident reporting; geodetic infrastructure modernization; spatial data infrastructures, land administration domain modeling; use of satellite imagery for various applications, including air quality, agriculture, and climate change modeling.Sagi Dalyot is an Assist.Prof. at the Department of Mapping and Geoinformation Engineering, The Technion.He is a geodata scientist developing methods of interpretation, mining, and integration of crowdsourced user-generated content to augment and develop location-based services and smart mapping infrastructures, focusing on routing and navigation solutions for people with mobility disabilities.He is the chair elect of the International Federation of Surveyors (FIG) Commission III on Spatial Information Management, and he serves as secretary of ISPRS WG IV/5 on Indoor/Outdoor Seamless Modelling, LBS, and Mobility.
data to open-source platforms are interested in enabling usage and availability to all, based on their desire for other researchers to act in an equivalent manner, making their data available if necessary.(y2) The researchers are interested in their personal advancement by publishing their research results, while promoting their contribution to the well-being of others (of society).(y11)

Table 1 .
The three stakeholder groups and their affinity to the different relevant values.

Table 2 .
Ethical aspects in the context of OSM: current state and recommendations.

Table A2 .
Ethical values, expectations, and interests of the seven main groups of stakeholders.