Ok but both Android and iOS have a good permission system where location and other data access can be highly controlled. Isn't it more prudent that the app be restricted by the OS to not have permissions it does not require? Surely the US can enforce something like that.