show how user preferences on privacy and benefits can be integrated into a co-design problem