“The way privacy law largely works for consumers in the United States is through what regulators call ‘notice and choice,'” said Samford University law professor Woodrow Hartzog by email. “That means that so long as users were put on notice of an app’s data practices and made the choice to continue using the app in light of that notice, then the app’s data practices are presumptively permissible.”