I think that it is important that at least 2 levels of access can be asked by an app per resource (location, contacts, etc):

1. Permission to access a resource just locally for the benefit of the user;

2. Permission to transmit the data about a resource for social purposes.