[alangpierce]

Thanks for calling that out, it looks like the "read phone status and identity" permission is actually there by accident. (Still, I think it doesn't provide access to call logs, but I might be missing something.) We never specify it in our manifest, and none of our libraries do, but it looks like it's getting automatically added for compatibility reasons because one of our libraries has a low target SDK version. I'm fairly sure we never use that permission. I'll file a bug and we can probably can probably find a workaround to get that permission removed in a future release.

All of the other permissions are explicitly in our manifest and correspond to actual features of the app.