Large-scale App privacy governance