The best apps use no APIs at all and require no permissions whatsoever. That's what I learned from the privacy geniuses on Mastodon dot social today