Google requires you to turn on all web, search, app and location history just to set your home address in maps. Then it continues to siphon all your private data 24x7 out of every device that Google touches.
Good point - permissioning issues like these are becoming really troublesome as well. "Facebook needs access to your photos so you can send a picture to your friend over our chat client" --> Grant access to all of your photos. For all you know, the instant you do it they're mining all of your pictures and running facial recognition on them.