> Should Apple have a "grant once for app, always allow location service?" (note: this would allow an innocuous app to turn into a tracker with a later update)
Users should be allowed to grant grant “always” permission, for that app version. The next time it gets updated, they get hit with the prompt again.
In fact I’d like that to happen for all permissions, so I regularly review them, and I know when an app update has occurred.
At a minimum if there were no changes in permissions wanted a notification saying X app updated and is using the same permissions, click here to see how many times each permissions was used (with the more privacy related ones at the top of the list) would be nice.
Then you don't run the risk of normalizing people always just clicking allow on the prompt that happens all the time (hello windows 7 UAC), which still giving them easy diacoverability and hints of poor behavior with existing permissions.
Apps can change their functionality without an official update as long as they can access the internet, and if they're enabling secret trackers they have no reason not to do this.
Users should be allowed to grant grant “always” permission, for that app version. The next time it gets updated, they get hit with the prompt again.
In fact I’d like that to happen for all permissions, so I regularly review them, and I know when an app update has occurred.