• Only collects what’s needed for the core function

  • Optional permissions (not “all or nothing”)