app vetting checklist