I think the thing that most people do not realise is that correctly implemented privacy preserving apps are very much the exception, not the norm