Applications don't use any of private data collected or generated in other way than required by application functions
Applications don't send private data collected or generated on public or non public servers without user knowledge
Applications may send private data but only if this is required by application function and always user interaction is required for such a transfer