>And if you are writing a third party widget, be considerate and make the defaults the least aggressive possible when it comes to accessing user/site/server data.

Unless your business model is literally collecting all personal and private information, then don't do it.