The Game That Asked for Too Much

Happy had been begging to play Zoom Dash for a week. Every single kid in Class 4 was talking about it, the one where you race a little cart down a mountain and collect stars. Bunny finally handed over his tablet, mostly to get some peace.

The game installed in a blink, and then a screen popped up asking for permission to use Happy's contacts, his camera, his microphone, his location, and his photos, all at once, with one giant friendly button at the bottom that said Allow All.

Happy did not read a single word of it. He tapped Allow All the way he'd tap anything standing between him and the fun level, and the game roared to life.

Bunny, a slim 13-year-old who noticed things, wandered back in and glanced at the tablet over Happy's shoulder. "Wait," he said. "Why does a racing game need your camera? You're not even taking a photo in it."

Happy shrugged. "It just asked. I said yes so I could play."

"It also wanted your contacts," said Bunny, scrolling through the settings. "And your microphone. For a game about driving down a mountain."

Two things happened before dinner. First, Riya's phone buzzed with a message Happy never meant to send. "Hiiii I am also playing Zoom Dash come join meeee," followed by a download link, sent to every single number in Bunny's contacts, including Riya's grandmother and a pizza delivery place saved from last year.

"Did you send me this?" Riya called out from the next flat, holding up her phone.

Then, right as Happy reached the fun level, a bright screen appeared asking if he'd like 999 Zoom Gems for a "special price", with a thumb already hovering helpfully over the Buy button, right next to a saved card that belonged to Bunny's mother.

Happy's thumb was halfway to tapping it when Bunny snatched the tablet away. "That's not pretend money," he said. "That's real money. Mummy's money."

Bunny opened the phone's settings and found Zoom Dash's permission list. He switched off contacts, camera, microphone, and location, one by one, leaving only the storage permission the game actually needed to save Happy's progress.

The game still worked perfectly. The cart still raced down the mountain. Nothing about the actual game had changed at all.

"See," said Bunny. "It never needed any of that. It just asked, because most people say yes without checking."

Nilu chachu had dropped by to return a tiffin box, and ended up staying for this instead. He listened to the whole story, nodding along, and then said something Happy wrote down in his notebook to remember.

"Before you tap Allow," chachu said, "ask one simple question: does this app actually need this to do what it promised me? A racing game needs to save your progress, so storage makes sense. It does not need your camera, your contacts, or your microphone to draw a road and a cart. When an app asks for more than its job needs, that has a name. It's called permission creep, and it's usually there because your information is worth something to someone, even if the game itself is free."

"And the Allow All button?" asked Bunny.

"That's a dark pattern," said chachu. "A button made big and friendly on purpose, so you tap it without reading, while the option to say no is small and easy to miss. You can always say no to one thing and yes to another. You almost never have to pick all or nothing."

That evening, Bunny, Happy, and Riya went through every app on the tablet together, reading each permission out loud and deciding, one at a time, whether it made sense. A weather app asking for location made sense. A calculator app asking for contacts did not, and it lost that permission on the spot.

Happy, now rather proud of himself, announced that he was going to check his mother's phone next, which made everyone laugh and made his mother lock her phone a little faster than usual.

Later, Mitthu hopped onto the table, spread his wings with enormous drama, and fixed Happy with one bright eye.

"Permission," he announced, "to access one biscuit."

Happy laughed so hard he nearly fell off his chair. "Request denied," he said. "You don't need the whole biscuit to do your job, Mitthu. Half is enough."

Mitthu considered this for a moment, decided it was an acceptable deal, and happily accepted half a biscuit, which, everyone agreed, was exactly the right amount of permission to grant.