Users want to reclaim control of their data. How is the privacy-first approach changing mobile app design?