The university near my house uses a parking app that requires all sorts of permissions to install. So I think there needs to be a hard limit with teeth (e.g., a

The university near my house uses a parking app that requires all sorts of permissions to install. So I think there needs to be a hard limit with teeth (e.g., auditing and stiff penalties) on collection and storage of personal data. Another idea is some kind of open API standard, where you can use the app of your choice in a particular locale, rather than being locked to a particular vendor. Then the apps can compete on which one has the best user experience, privacy, and so forth.