There seems to be a broad, if unofficial, consensus that the app maker should be accountable for consumer privacy -- but there isn’t a roadmap for developers to navigate this challenging legal landscape.