The problem, as I see it, is over the top access requests to access elevated privileges and personal information is the norm. This is not a user problem. There

The problem, as I see it, is over the top access requests to access elevated privileges and personal information is the norm. This is not a user problem. There must be a way for : 1. third-party developers to use the api to access information for their app in a kind of handshake mode - without the ability to use that information externally - or to access elevated privileges in a kind of sandbox arrangement. 2. for the api developers to use their control of market places and warnings to make these low level access privileges the norm, rather than the exception. Getting these two things in place would mean developers would have to make a case to you, the user, if they wanted to do something more powerful or dodgy with the api.