Android Mobile App - New permissions

Ragebflame

Hi,

I have a quick question around the new Bluetooth permissions that the Mobile Banking Android app requires:

[font=Roboto, UILanguageFont, Arial, sans-serif]Other[/font]

• receive data from Internet
  
  
• full network access
  
  
• view network connections
  
  
• prevent device from sleeping
  
  
• pair with Bluetooth devices
  
  
• access Bluetooth settings
  

[*]


Would someone be able to clarify why the app now needs access to Bluetooth settings? There is virtually no detail in the change logs.

Thanks,
Daniel 

Bank of Ireland: Sarah

Ragebflame wrote: »

Hi,

I have a quick question around the new Bluetooth permissions that the Mobile Banking Android app requires:

[font=Roboto, UILanguageFont, Arial, sans-serif]Other[/font]

• receive data from Internet
  
  
• full network access
  
  
• view network connections
  
  
• prevent device from sleeping
  
  
• pair with Bluetooth devices
  
  
• access Bluetooth settings
  
  
  

[*]


Would someone be able to clarify why the app now needs access to Bluetooth settings? There is virtually no detail in the change logs.

Thanks,
Daniel 

[*]
Hi Daniel,

Thanks for contacting us on Boards.

This permission allows us to send you Push notifications based on your location and preferences in order to improve your interaction and experience with us.


Push notifications are messages that mobile apps send to your mobile device to improve your interaction and experience with us. You may receive notifications about services, offers and product information based on your location and your preferences. Upon download or upgrade of our mobile banking app, you can decline either or both of these permissions. To get the most out of your notifications you can turn on Bluetooth. You can control your push notification, location and Bluetooth settings directly on your mobile device.
Thanks,
Sarah

Veloce150

When I upgraded the Banking App on Android I was informed that it wanted access to my Bluetooth. There is no option to deny access to my Bluetooth connections.

In your privacy statement it says this:

Push notifications are messages that mobile apps send to your mobile device to improve your interaction and experience with us. You may receive notifications about services, offers and product information based on your location and your preferences. Upon download or upgrade of the mobile banking app. You can decline either or both of these permissions. To get the most out of your notifications you can turn on bluetooth. You can control your push notification, location and Bluetooth and settings directly on your mobile device. 

Can you explain how the Banking app uses Bluetooth?

Can I use the Mobile app without it accessing my Bluetooth devicees?

The app also requires access to my location. If I disable this permission, the app will not start. Can I use the app without disclosing my location?

Ragebflame

Bank of Ireland: Sarah wrote: »

Ragebflame wrote: »

Hi,

I have a quick question around the new Bluetooth permissions that the Mobile Banking Android app requires:

[font=Roboto, UILanguageFont, Arial, sans-serif]Other[/font]

• receive data from Internet
  
  
• full network access
  
  
• view network connections
  
  
• prevent device from sleeping
  
  
• pair with Bluetooth devices
  
  
• access Bluetooth settings
  
  
  
  
  

[*]


Would someone be able to clarify why the app now needs access to Bluetooth settings? There is virtually no detail in the change logs.

Thanks,
Daniel 

[*]
Hi Daniel,

Thanks for contacting us on Boards.

This permission allows us to send you Push notifications based on your location and preferences in order to improve your interaction and experience with us.


Push notifications are messages that mobile apps send to your mobile device to improve your interaction and experience with us. You may receive notifications about services, offers and product information based on your location and your preferences. Upon download or upgrade of our mobile banking app, you can decline either or both of these permissions. To get the most out of your notifications you can turn on Bluetooth. You can control your push notification, location and Bluetooth settings directly on your mobile device.
Thanks,
Sarah

[*]
Hi Sarah,

Thanks for the detailed reply. I did not see this listed anywhere on the Play store. This is not something that I am interested in. Is there any way to opt out of this without rooting my phone and blocking the permissions manually?

Thanks,
Daniel

Bank of Ireland: Evie

Hi Veloce150
 
Thanks for getting in touch with us hereon Boards.ie You can see some more information on why the Bank asks for these various permissions here 


To use the updated app you would need to accept these permissions. Apologies for any inconvenience. 

Thanks, 

Evie 

Veloce150

Bank of Ireland: Sarah wrote: »

[*]
Hi Daniel,

Thanks for contacting us on Boards.

This permission allows us to send you Push notifications based on your location and preferences in order to improve your interaction and experience with us.


Push notifications are messages that mobile apps send to your mobile device to improve your interaction and experience with us. You may receive notifications about services, offers and product information based on your location and your preferences. Upon download or upgrade of our mobile banking app, you can decline either or both of these permissions. To get the most out of your notifications you can turn on Bluetooth. You can control your push notification, location and Bluetooth settings directly on your mobile device.
Thanks,
Sarah

Csn you describe in detail, how enabling Bluetooth enables us to 'get the most out of notifications'?

Why does your app need access to my 'paired devices'? What informstion is it collecting from them? What information is sent to Bank of Ireland as a result of this Bluetooth connection? Does it cause my phone to communicate with in-store Bluetooth beacons? Will it pair itself automatically without permission?

Please describe how can this feature be disabled without switching off Bluetooth on the phone.

Bank of Ireland: Evie

Ragebflame wrote: »

Bank of Ireland: Sarah wrote: »

Ragebflame wrote: »

Hi,

I have a quick question around the new Bluetooth permissions that the Mobile Banking Android app requires:

[font=Roboto, UILanguageFont, Arial, sans-serif]Other[/font]

• receive data from Internet
  
  
• full network access
  
  
• view network connections
  
  
• prevent device from sleeping
  
  
• pair with Bluetooth devices
  
  
• access Bluetooth settings
  
  
  
  
  
  
  

[*]


Would someone be able to clarify why the app now needs access to Bluetooth settings? There is virtually no detail in the change logs.

Thanks,
Daniel 

[*]
Hi Daniel,

Thanks for contacting us on Boards.

This permission allows us to send you Push notifications based on your location and preferences in order to improve your interaction and experience with us.


Push notifications are messages that mobile apps send to your mobile device to improve your interaction and experience with us. You may receive notifications about services, offers and product information based on your location and your preferences. Upon download or upgrade of our mobile banking app, you can decline either or both of these permissions. To get the most out of your notifications you can turn on Bluetooth. You can control your push notification, location and Bluetooth settings directly on your mobile device.
Thanks,
Sarah

[*]
Hi Sarah,

Thanks for the detailed reply. I did not see this listed anywhere on the Play store. This is not something that I am interested in. Is there any way to opt out of this without rooting my phone and blocking the permissions manually?

Thanks,
Daniel

[*]
Hi Daniel, 

These permissions are necessary in order to use the updated app, you can see here for more details on these permissions, apologies though for any inconvenience this may cause. 

Thanks, 
Evie 

lawred2

Bank of Ireland: Sarah wrote: »

Ragebflame wrote: »

Hi,

I have a quick question around the new Bluetooth permissions that the Mobile Banking Android app requires:

[font=Roboto, UILanguageFont, Arial, sans-serif]Other[/font]

• receive data from Internet
  
  
• full network access
  
  
• view network connections
  
  
• prevent device from sleeping
  
  
• pair with Bluetooth devices
  
  
• access Bluetooth settings
  
  
  
  
  

[*]


Would someone be able to clarify why the app now needs access to Bluetooth settings? There is virtually no detail in the change logs.

Thanks,
Daniel 

[*]
Hi Daniel,

Thanks for contacting us on Boards.

This permission allows us to send you Push notifications based on your location and preferences in order to improve your interaction and experience with us.


Push notifications are messages that mobile apps send to your mobile device to improve your interaction and experience with us. You may receive notifications about services, offers and product information based on your location and your preferences. Upon download or upgrade of our mobile banking app, you can decline either or both of these permissions. To get the most out of your notifications you can turn on Bluetooth. You can control your push notification, location and Bluetooth settings directly on your mobile device.
Thanks,
Sarah

[*]
Bluetooth has nothing to do with push notifications

Veloce150

Plesse direct me to a detailed explanation of what use is made of my Bluetooth connection by your app.

Veloce150

lawred2 wrote: »

[*]
Bluetooth has nothing to do with push notifications

It might do if it's associated to small in-store tracking devices called 'Bluetooth Beacons'. These can locate you indoors to a particular aisle or display.

The permissions would also allow the app to gather information about other paired devices you own.

It will be most interesting to hear a more detailed explanation from BoI.

lawred2

Veloce150 wrote: »

lawred2 wrote: »

[*]
Bluetooth has nothing to do with push notifications

[*]

It might do if it's associated to small in-store tracking devices called 'Bluetooth Beacons'. These can locate you indoors to a particular aisle or display.

The permissions would also allow the app to gather information about other paired devices you own.

It will be most interesting to hear a more detailed explanation from BoI.

[*]
That would be very interesting

Ragebflame

lawred2 wrote: »

Veloce150 wrote: »

lawred2 wrote: »

[*]
Bluetooth has nothing to do with push notifications

[*]

It might do if it's associated to small in-store tracking devices called 'Bluetooth Beacons'. These can locate you indoors to a particular aisle or display.

The permissions would also allow the app to gather information about other paired devices you own.

It will be most interesting to hear a more detailed explanation from BoI.

[*]
That would be very interesting

[*]
According to the BoI website:

Why do we ask for this?
This permission allows us to send you relevant information to your app, based on your proximity to a Bluetooth device called an iBeacon.
For example, Bank of Ireland uses iBeacons in some branches to trigger the sending of push messages to customers notifying them of relevant information.

They then then just link to the Android developer page on the android.bluetooth module. I am not interested in this and it looks like its mandatory with the latest version of the app. Time to disable this with XPrivacy. 

Bank of Ireland: Evie

Veloce150 wrote: »

Plesse direct me to a detailed explanation of what use is made of my Bluetooth connection by your app.

Hi Veloce150, 

Our group website here outlines This permission allows us to send you relevant information to your app, based on your proximity to a Bluetooth device called an iBeacon.
For example, Bank of Ireland uses iBeacons in some branches to trigger the sending of push messages to customers notifying them of relevant information. We won't use this information for any other reasons other than to send you these helpful notifications. 

Please let us know if you have any other queries in relation to this. 

Thanks, 
Evie 

Bank of Ireland: Evie

Ragebflame wrote: »

lawred2 wrote: »

Veloce150 wrote: »

lawred2 wrote: »

[*]
Bluetooth has nothing to do with push notifications

[*]

It might do if it's associated to small in-store tracking devices called 'Bluetooth Beacons'. These can locate you indoors to a particular aisle or display.

The permissions would also allow the app to gather information about other paired devices you own.

It will be most interesting to hear a more detailed explanation from BoI.

[*]
That would be very interesting

[*]
According to the BoI website:

Why do we ask for this?
This permission allows us to send you relevant information to your app, based on your proximity to a Bluetooth device called an iBeacon.
For example, Bank of Ireland uses iBeacons in some branches to trigger the sending of push messages to customers notifying them of relevant information.

They then then just link to the Android developer page on the android.bluetooth module. I am not interested in this and it looks like its mandatory with the latest version of the app. Time to disable this with XPrivacy. 

Hi Ragebflame, 

I am sorry I have been able to provide any other information for you here, I have however been passing all commentary back to our Mobile Team and they will be looking into this. If we come up with a solution to this we will get in touch here straight away. Apologies for any inconvenience caused here. 

Thanks, 
Evie 

Veloce150

Bank of Ireland: Evie wrote: »

Veloce150 wrote: »

Plesse direct me to a detailed explanation of what use is made of my Bluetooth connection by your app.

Hi Veloce150, 

Our group website here outlines This permission allows us to send you relevant information to your app, based on your proximity to a Bluetooth device called an iBeacon.
For example, Bank of Ireland uses iBeacons in some branches to trigger the sending of push messages to customers notifying them of relevant information. We won't use this information for any other reasons other than to send you these helpful notifications. 

Please let us know if you have any other queries in relation to this. 

Thanks, 
Evie 

Thank you for the information supplied so far.

Your formal privacy statement on the website does not explicityly mention the use of iBeacons.

Does the banking app only use iBeacons  located on Bank of Ireland premises or does it work with 3rd party iBeacons (e.g. at a car dealership?).

When the app  processes the location information about the customer, where is this information stored, what information is it aggregated with and how long is it retained for? (Apologies if this is already disclosed in your return to the DPC)

In locations where iBeacons are deployed, is there a physical notice displayed to customers informing that their visit is being tracked? (e.g. like CCTV notices)

If I opt out of 'push notifications' is my proximity to an iBeacon still recorded?

Does the use of iBeacons on Bank of Ireland Premises expose users to locatiion tracking by applications other than the one supplied by Bank of Ireland?

Will a fix be released to allow use of the banking app without the mandatory granting of Bluetooth and Location services permissions?

Veloce150

Found this article while researching iBeacon:

iBeacon in Banking is getting hot. We’ve listed some potential use cases that financial service firms are showing real interest in.
1. Welcome Communication: As customers pass or enter a branch, the bank can deliver a welcome notification to the customer depending on their interaction with the mortgages app. There could be 5 segmented user messages and possibly more than 30 notification scenarios that would be highly relevant to the person. These notifications could ask the person if they wish to speak to a relevant representative. The could include a personalized map of the office and where to find the available specialists currently in the office.

2. Customer Recognition: When a customer enters a branch, branch personnel can be alerted and can be provided interaction history, their mortgage application to date and sales prompts for interacting with the customer based on their value. This enhanced recognition can improve service and loyalty.

3. Availability and Wait Times: Much like at an Apple store, a customer could be provided the wait times for specific services/specialists as well as a way to set an appointment using their smartphone app. With interactive notifications a user could be asked in the notification is they wish to make an appointment now or later and respond directly in the notification.

4. Personalized Product Offers: Based on the customer interaction with the mortgages app, account ownership and any CRM information Bank of Ireland may provide personalised pricing ccan be sent to the customer’s smartphone upon entering the branch. This could allow for dynamic pricing of services or rewards offers based on the customer’s current relationship or relationship potential.

5. Location Specific Offers: If a customer is standing at a deposit slip counter, they could receive a notification (along with introductory video) related to remote deposit capture services so the user knows the next time that they can easily lodge the deposit through the app or ATM.

6. Surveying: With iBeacon a bank will be able to identify those customers who were present in a branch and this can then provide a way to solicit customer opinions and service ratings when the customer leaves the branch or after a certain time period.

7. Branch Analytics: With iBeacon, banks will be able to understand which customers are using branches, what are the busiest days and times, how long on average are customers spending in branches and what type of transactions customers are completing. This data can assist in optimizing the branch experience for customers in the future. This data can also assist in cross-channel attribution tracking.

8. Beacon Enabled ATMs: For customers who have authorized communication via their mobile device, a verification notification can be sent to the users device so they can verify they have used their banking card at a particular ATM. This technology would reduce the burden of verification for fraud and could also potentially replace the need to use a card to access the ATM.

Bank of Ireland: Nicola

Veloce150 wrote: »

Bank of Ireland: Evie wrote: »

Veloce150 wrote: »

Plesse direct me to a detailed explanation of what use is made of my Bluetooth connection by your app.

Hi Veloce150, 

Our group website here outlines This permission allows us to send you relevant information to your app, based on your proximity to a Bluetooth device called an iBeacon.
For example, Bank of Ireland uses iBeacons in some branches to trigger the sending of push messages to customers notifying them of relevant information. We won't use this information for any other reasons other than to send you these helpful notifications. 

Please let us know if you have any other queries in relation to this. 

Thanks, 
Evie 

Thank you for the information supplied so far.

Your formal privacy statement on the website does not explicityly mention the use of iBeacons.

Does the banking app only use iBeacons  located on Bank of Ireland premises or does it work with 3rd party iBeacons (e.g. at a car dealership?).

When the app  processes the location information about the customer, where is this information stored, what information is it aggregated with and how long is it retained for? (Apologies if this is already disclosed in your return to the DPC)

In locations where iBeacons are deployed, is there a physical notice displayed to customers informing that their visit is being tracked? (e.g. like CCTV notices)

If I opt out of 'push notifications' is my proximity to an iBeacon still recorded?

Does the use of iBeacons on Bank of Ireland Premises expose users to locatiion tracking by applications other than the one supplied by Bank of Ireland?

Will a fix be released to allow use of the banking app without the mandatory granting of Bluetooth and Location services permissions?

Hi Veloce150, I'm following up on this with our mobile banking team here for you and I’ll let you know if I have any further information about this, thanks.

Nicola

Ragebflame

Veloce150 wrote: »

Found this article while researching iBeacon:

iBeacon in Banking is getting hot. We’ve listed some potential use cases that financial service firms are showing real interest in.
1. Welcome Communication: As customers pass or enter a branch, the bank can deliver a welcome notification to the customer depending on their interaction with the mortgages app. There could be 5 segmented user messages and possibly more than 30 notification scenarios that would be highly relevant to the person. These notifications could ask the person if they wish to speak to a relevant representative. The could include a personalized map of the office and where to find the available specialists currently in the office.

2. Customer Recognition: When a customer enters a branch, branch personnel can be alerted and can be provided interaction history, their mortgage application to date and sales prompts for interacting with the customer based on their value. This enhanced recognition can improve service and loyalty.

3. Availability and Wait Times: Much like at an Apple store, a customer could be provided the wait times for specific services/specialists as well as a way to set an appointment using their smartphone app. With interactive notifications a user could be asked in the notification is they wish to make an appointment now or later and respond directly in the notification.

4. Personalized Product Offers: Based on the customer interaction with the mortgages app, account ownership and any CRM information Bank of Ireland may provide personalised pricing ccan be sent to the customer’s smartphone upon entering the branch. This could allow for dynamic pricing of services or rewards offers based on the customer’s current relationship or relationship potential.

5. Location Specific Offers: If a customer is standing at a deposit slip counter, they could receive a notification (along with introductory video) related to remote deposit capture services so the user knows the next time that they can easily lodge the deposit through the app or ATM.

6. Surveying: With iBeacon a bank will be able to identify those customers who were present in a branch and this can then provide a way to solicit customer opinions and service ratings when the customer leaves the branch or after a certain time period.

7. Branch Analytics: With iBeacon, banks will be able to understand which customers are using branches, what are the busiest days and times, how long on average are customers spending in branches and what type of transactions customers are completing. This data can assist in optimizing the branch experience for customers in the future. This data can also assist in cross-channel attribution tracking.

8. Beacon Enabled ATMs: For customers who have authorized communication via their mobile device, a verification notification can be sent to the users device so they can verify they have used their banking card at a particular ATM. This technology would reduce the burden of verification for fraud and could also potentially replace the need to use a card to access the ATM.

Thanks Veloce150, I was finding trouble tracking this kind of information down. It seems like disabling the Location and Network permissions in Android 6.0 will cause the app to crash when loading. I have managed to block it using the specific bluetooth and location query calls using XPrivacy. I am not interested in this kind of a feature. I hope and Opt-out options is added in the next version.

Bank of Ireland: Sharon

Hi Veloce150
 
We’ve spoken to our Mobile Dev Team and they have advised the following;
 
Some of the detail you are requesting is sensitive information and we wouldn’t be in a position to disclose it, but we’ll try and address the concerns as best we can.
 
The Bank uses push messaging to inform and update customers with relevant information.
 
We do of course take customer privacy very seriously, so all information related to push messaging is anonymised.
 
You need an app to receive a push message triggered by an iBeacon, only Bank of Ireland can push messages to the Bank of Ireland Mobile Banking App. No other apps are used to track your use of the Bank of Ireland Mobile Banking App.
 
iBeacons operate through Bluetooth so once the Bluetooth signal in the phone is operational and the customer has the Bank of Ireland Mobile Banking App, they can be sent a push message if they walk within the Bluetooth zone of an iBeacon. iBeacons do not know or store any customer information.   
 
The app requires location and Bluetooth to operate, however we are constantly reviewing these permissions and this may change in future app upgrades.


Thanks,


Sharon
 
 

Veloce150

Sharon, than you for making these inquiries. There are still some ananswered questions.

You have not said if there are information notices at locations where your iBeacons are operational.

The Bank uses push messaging to inform and update customers with relevant information.

How is this relevance determined? Is the location of the customer matched to information about that customer? Does this happen in the app on on one of your servers using data obtained via the app? Are server logs of this interaction maintained? This really should be detailed in your privacy statement.

You need an app to receive a push message triggered by an iBeacon, only Bank of Ireland can push messages to the Bank of Ireland Mobile Banking App. No other apps are used to track your use of the Bank of Ireland Mobile Banking App.

Can the BOI app react to an iBeacon at a non-Bank of Ireland location? For example, a car dealership with whom Bank of Ireland has a promotional relationship?

iBeacons operate through Bluetooth so once the Bluetooth signal in the phone is operational and the customer has the Bank of Ireland Mobile Banking App, they can be sent a push message if they walk within the Bluetooth zone of an iBeacon. iBeacons do not know or store any customer information.

I know that the beacons do not collect information, but they do provide very precise location and temporal information which can be processed by the app and which can, potentially, be relayed back to BOI or stored on the phone.

If a customer has disabled push notifications in your app, does the app process any information concerning the customer's proximity to an IBeacon?

The app requires location and Bluetooth to operate, however we are constantly reviewing these permissions and this may change in future app upgrades.

I been able to work around this problem, by disabling Location Services and Bluetooth on the whole phone. It's just not possible to do this in relation to your app only. My phone indicates that this may be due to your app having been written for older devices.

I consider the demanding of excessive permissions by the app, beyond what is needed by the banking application's core function to be on the boundaries of a breach of DP regulations which prohibit excessive data collection. Any storage of this information without informed customer consent would cross that boundary.

Bank of Ireland: Sarah

Hi Veloce150,

In relation to your latest post and queries I hope that the below post answers the remainder of your questions, which our Mobile Dev team have been happy to help us to provide:
 

“You have not said if there are information notices at locations where your iBeacons are operational.”



 
To date we have not put up information notices in branches where we have tested beacons as it is only small test and learn campaigns to see how we can provide for the customer and build our knowledge of the new technology. From a legal perspective we are happy that this is covered in our Ts&Cs. We would like to reassure you that our intentions around the use of iBeacons are good, and to better serve our customers by providing them with more information where relevant.

“How is this relevance determined? Is the location of the customer matched to information about that customer? Does this happen in the app on on one of your servers using data obtained via the app? Are server logs of this interaction maintained? This really should be detailed in your privacy statement.”




The relevance of a message is determined by the bank. We only wish to push relevant information to customers that they will feel are of value (we are aware that this is subjective but we strive to do our best). The location of a customer is matched to the iBeacon being in that location and the message being pushed chosen on the basis of a customer entering this specific area. Push is sent when the mobile device comes within radius of the iBeacon. We can see how many pushes were sent but not to whom they were sent to.

“Can the BOI app react to an iBeacon at a non-Bank of Ireland location? For example, a car dealership with whom Bank of Ireland has a promotional relationship?”




The BOI App can only receive iBeacon notifications from BOI iBeacons and not external beacons. If a car dealerships has their own iBeacons they cannot interact with BOI App or iBeacons.

“I know that the beacons do not collect information, but they do provide very precise location and temporal information which can be processed by the app and which can, potentially, be relayed back to BOI or stored on the phone.”




We do not store location based information on the customers phone and location are stored in order to push to groups who have previously entered a beacon but all information is anonymous and no PII is stored or processed.

“If a customer has disabled push notifications in your app, does the app process any information concerning the customer's proximity to an IBeacon?”




Location based service and push notifications are separate. If the customer has disabled push notifications in the app and has accepted location based services the app will detect a customer entering an iBeacon but they will not receive a push notification.

“I been able to work around this problem, by disabling Location Services and Bluetooth on the whole phone. It's just not possible to do this in relation to your app only. My phone indicates that this may be due to your app having been written for older devices.”



In relation to the app and disabling Location Services and Bluetooth we are looking into the issue you are talking about.
All permissions on Android devices are controlled and driven by Google. As a bank and service we are constantly striving to improve the functionalities and services we provide to our customers. 

“I consider the demanding of excessive permissions by the app, beyond what is needed by the banking application's core function to be on the boundaries of a breach of DP regulations which prohibit excessive data collection. Any storage of this information without informed customer consent would cross that boundary.”





Before any new functionality or service is introduced on mobile we go through an extensive risk process that involves Risk, Legal, Fraud and IT security. They have all been involved in the introduction of this technology and based on their expert opinions, have deemed it not in breach of any Data Protection regulations. If you feel that the bank is in breach of Data Protection regulations please contact us through our formal complaints process which you can view here. 

I hope this clears up your concerns and please let us know if we can help with anything else. 

Thanks,
Sarah

Veloce150

Bank of Ireland: Sarah wrote: »

I hope this clears up your concerns and please let us know if we can help with anything else. 

Thanks,
Sarah

Thank you , Sarah, for obtaining this information which is not clearly provided in Boi's privacy statement.

My concerns are not assuaged. It's very troubling that the application does not allow the user to de-select location services and Bluetooth at app-level.

I don't think push-notifications are a feature developed as a result of requests from customers.

It's been very interesting to learn about iBeacon.  I'll be keeping my Bluetooth and location services switched off.