Text this: Detecting privacy compliance of mobile applications from the perspective of the "minimum necessary" principle