1. A method, comprising: receiving a command to access data generated by a sensor; determining that the command is not permitted by a privacy policy; and based on the determining that the command is not permitted by a privacy policy, changing the state of a privacy indicator.