> That's completely separate from ownership of the data No, it isn't. Under the app-controlled model, my access to my data is limited to what the app offers.

> That's completely separate from ownership of the data No, it isn't. Under the app-controlled model, my access to my data is limited to what the app offers. > […] it's what prevents a malicious app from hoovering up all > of your Tinder messages, or your financial data from Mint. That's an implementation of access control using the app-owned-data model. It's not the only possible implementation of access control.