Just what app permissions must I be suspicious of?