We need a privacy graph service, one trusted API we sign up to and give it all access. Then developers can simply access different level of our services through this one api.