Can apps work without taking possession of your data? Researchers think so.