You need a mobile application management on. You need a privacy policy. And you need to stick to them.