Connected Apps' principles on user trust include: confirmation granularity depends on risk, read-only operations are frictionless, operations such as editing, booking and deleting request explicit consent before execution; sensitive data is explicitly displayed; prompts specifically state the app and the operation; users can set whether to always allow per app and per operation.