[youngtaff]

The API to be off by default i.e. it’s opt in and not opt out

And it should be behind a permissions prompt