modules must ask a user's permission to share his/her personal data and inform where and why these data will be used