the bigger question is that why aren't these standards meeting privacy best practices in their API designs? Why are companies like Google influencing these standards so much ? In my opinion if that continues, we should disregard these so called "standards".