I know a few people that never install apps on their phones. Because they have no clue re: security, whether the app has access to this or that or whatever.

I spoke to a family member and he says to me I've got this bus app for route X. And I say what, you've got an app for your local bus route, and he says yes. I then asked what was wrong with the website?

Same here. There is often no functional difference between a shortcut (from your homescreen) to the mobile website and the official app, so that's what I do. Goodbye cluttering downloads, permission systems, etc. It will need to load a few kilobytes of javascript extra upon every use (if caching doesn't solve that already), but I think that's totally worth it.