tracking app permissions and what they do