It seems that companies like this can't help but abuse the permissions I grant them, so the result is that they don't get any permissions at all.