Question

A mobile app development team is finalizing a new fitness application. The product owner wants location tracking, contact syncing, and personalized advertising all enabled out of the box so users get the 'full experience' immediately, with settings available to disable them later. As the privacy engineer applying privacy by default, what should you recommend for the initial configuration of these features?

Accepted Answer

Ship the app with all three features disabled by default, enabling each only after the user takes an affirmative action to opt in for that specific purpose

Answer

Enable all three features by default but display a prominent notice at first launch explaining how to disable them

Answer

Enable location tracking by default since it is core to fitness functionality, and disable contact syncing and advertising

Answer

Enable all three features by default and rely on the operating system's permission prompts to obtain the necessary user consent