A server computer may receive diagnostic logs from a plurality of electronic devices, each having a particular application installed. The diagnostic logs include information about call stacks within the particular application on the plurality of electronic devices for writing data to a storage device that is on each of the plurality of electronic devices. The server computer may filter out a set of call-paths from the call stacks to obtain a set of functions that can be used identify a set of call-path signatures. The server computer may for each function, determine a cumulative measure of write operations to the storage device performed by the function across the electronic devices and identify at least one function from the set of call-path signatures matching one or more predetermined criteria associated with the cumulative measures. The server computer may provide a notification and a corrective action to a developer.