Measuring personal information exposure in the mobile and IoT environments