That's not strictly true. The GDPR contains language that potentially requires you to actually need the data you ask for to "enable" a feature. You could claim you need location to determine Temperature and Currency units for example, but not access to my contacts. Now, how all this holds up, I'm not sure
> Consent is presumed not to be freely given if it does not allow separate consent to be given to different personal data processing operations despite it being appropriate in the individual case, or if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance.