Best practices for making your app private by design