Sincere question: what new steps would you recommend they take?
The iOS location request prompt uses very clear language while allowing for granular access, and the granted permissions are easily reviewed in Settings.
The App Store requires data usage disclosures, which are presented about as succinctly as possible.
They could mandate that apps share absolutely no location data with any third party, but that would break all sorts of things (external mapping APIs, for example), and it’d basically be impossible to police.
Are there mitigations they could provide that I’m missing?
The iOS location request prompt uses very clear language while allowing for granular access, and the granted permissions are easily reviewed in Settings.
The App Store requires data usage disclosures, which are presented about as succinctly as possible.
They could mandate that apps share absolutely no location data with any third party, but that would break all sorts of things (external mapping APIs, for example), and it’d basically be impossible to police.
Are there mitigations they could provide that I’m missing?