Updated to include note about user data permissions