Managing application permissions on a mobile device

One or more non-transitory computer-readable media having computer-executable instructions embodied thereon that, when executed, causes a computing device to perform a method of remotely managing and tracking application permissions for applications installed on a mobile device, the method comprising:

• receiving, at the computing device, a permission-status message from the mobile device that includes information describing a change in permission status for an application on the mobile device, wherein the permission status is used by the mobile device to determine whether the application is given access to a capability on the mobile device, and wherein the permission-status message includes a unique identifier for the mobile device;
• storing the information related to the change in the permission status in a data store in association with the unique identifier, thereby allowing a current permission status for the application to be tracked independently of the mobile device;
• receiving a request to retrieve the current permission status for the application from the data store;
• and
• communicating the current permission status for the application.

One or more non-transitory computer-readable media having computer-executable instructions embodied thereon that, when executed, causes a mobile device to perform a method of managing application permissions on the mobile device, the method including:

• receiving a request from an application to execute computer code that will access a capability on the mobile device;
• determining that a policy governing access to the capability requires a user of the mobile device to give the application permission to access the capability;
• determining that the user has not given the application permission to access the capability;
• presenting a permission interface to the user that asks whether the user wants to grant the application permission to access the capability;
• receiving a response from the user that grants the application permission to access the capability;
• updating a permission status of the application to allow the application to access the capability;
• and
• communicating the content of the response to a privacy manager on a computing device that is separate from the mobile device, thereby allowing the permission status to be remotely recorded and accessed.