Granting unnecessary permissions to mobile applications can expose you to security & privacy risks. When an application accesses contacts, it can collect names, phone numbers, email addresses, location and more . That data can be sold or used for identity fraud, phishing attacks