1. A method comprising: receiving, by a server computer from an application program executable by a mobile device, a request to obtain private data associated with a user of the mobile device; in response to the request, determining, by the server computer, whether the application program is permitted to access the private data associated with the user of the mobile device; based upon determining, by the server computer, that the application program is permitted to access the private data associated with the user of the mobile device, generating, by the server computer, a first response directed to the mobile device, the first response comprising first instructions that are executable by the mobile device to cause the application program to obtain the private data, and sending the first response to the mobile device; or based upon determining, by the server computer, that the application program is not permitted to access the private data associated with the user of the mobile device, generating, by the server computer, a second response directed to the mobile device, the second response comprising second instructions that are executable by the mobile device to cause the application program to avoid obtaining the private data, and sending the second response to the mobile device.