On privacy, app tracking, and attribution