Stick to software off registered operators with had written privacy principles, and you can comment requested permissions prior to establishing