A method comprising a processor: receiving a software application by an apparatus; operating an operating system platform of the apparatus; verifying an authenticity of the software application (94, 96) and, only if the authenticity of the software application is verified: installing the software application on the apparatus for operation above the operating system platform; creating a permission record for the software application; and storing the permission record in a policy database of the operating system platform, the permission record including at least one permission identifying at least one service the software application is authorized to receive from the operating system platform, the permission record being editable by a user of the apparatus to indicate at least one service the user has authorized the software application to receive from the operating system platform; receiving a request from the software application for a service of the operating system platform, the request being received after the software application is executed for operation and while operating; determining if the software application is authorized to receive the requested service based upon the permission record (120,122); providing the requested service to the software application if the software application is authorized to receive the requested service; and maintaining the permission record in a volatile memory until the software application is closed. receiving a software application by an apparatus; operating an operating system platform of the apparatus; verifying an authenticity of the software application (94, 96) and, only if the authenticity of the software application is verified: installing the software application on the apparatus for operation above the operating system platform; creating a permission record for the software application; and storing the permission record in a policy database of the operating system platform, the permission record including at least one permission identifying at least one service the software application is authorized to receive from the operating system platform, the permission record being editable by a user of the apparatus to indicate at least one service the user has authorized the software application to receive from the operating system platform; installing the software application on the apparatus for operation above the operating system platform; creating a permission record for the software application; and storing the permission record in a policy database of the operating system platform, the permission record including at least one permission identifying at least one service the software application is authorized to receive from the operating system platform, the permission record being editable by a user of the apparatus to indicate at least one service the user has authorized the software application to receive from the operating system platform; receiving a request from the software application for a service of the operating system platform, the request being received after the software application is executed for operation and while operating; determining if the software application is authorized to receive the requested service based upon the permission record (120,122); providing the requested service to the software application if the software application is authorized to receive the requested service; and maintaining the permission record in a volatile memory until the software application is closed.