Short answer
HubSpot's KB: Super Admins can approve apps, manage install permissions, update data permissions, and revoke approval. Use Manage access in the Approved apps table to uninstall for specific users.
1. In HubSpot
The relevant screen in my demo portal.

2. Worth knowing
Review approved apps when people leave.