1. At least one non-transitory machine readable storage medium comprising one or more instructions that, when executed by at least one processor, cause the at least one processor to perform a method comprising:hooking, at a level below an operating system that executes on a computing device, one or more requests to produce hooked one or more requests, wherein the one or more requests are from an application to access one or more sensors included in the computing device, and the one or more sensors include an accelerometer, a gravity sensor, a gyroscope, a rotational vector sensor, a barometer, a photometer, a thermometer, an orientation sensor, a magnetometer, a microphone, or a global positioning sensor;
identifying, based on the hooked one or more requests, the application and the one or more sensors;
hooking a kernel to monitor a use by the application of the one or more sensors from an operating system level application program interface to log data related to the hooked one or more requests to produce logged data in a storage structure;
comparing the logged data in the storage structure to the hooked one or more requests to identify when there is a discrepancy; and
performing a remedial action when there is the discrepancy.