[komali2]

> if you don’t explicitly give it permissions

A lot of users don't understand that permissions are optional. They just tap to make the boxes go away. So the app developer stealing your data isn't insulated from being unethical just because they gave you a series of dialog boxes on installation.

So to answer your question: your contact list, location, connected Bluetooth devices, your photos, etc.

[scarface_74]

And there are now web standards for precise location (has been forever), Bluetooth, battery status, etc