The next battleground on web privacy: apps.