A method for managing and tracking a permission status for an application on a mobile device is provided. The privacy policy on a mobile device may require users to grant permission for an application to access certain capabilities (e.g., GPS, personal information manager) on the mobile device. The user may be presented an interface on the mobile device that allows the user to grant an application permission to access the capability. When the user grants an application permission to access a capability a message is sent to a remote privacy manager that tracks the permission status of applications on the mobile device. The user may view the permission status of each application through the Internet. The user may also use the privacy manager to remotely change the permissions on the mobile device.