You HAVE TO turn it off per-app. Completely and endlessly opt-out. Have 500 apps, good luck?!