The proposed solutions are a total sledge hammer approach. How about if you want PHAsset to give you location information, you have to ask for the Location Permission? Problem solved. Devs can use their custom pickers and cameras and can’t spy information they haven’t asked permission for.