It is a simple rule and there are definitely exceptions in both directions. (Good free apps, bad paid apps) The safest assumption to make is that if you give a

It is a simple rule and there are definitely exceptions in both directions. (Good free apps, bad paid apps) The safest assumption to make is that if you give an app permission to access information from your device that the information will be shared with a nefarious actor. From there, if you want to get benefits from uploading your information, you can make adjustments like "Oh, I know this guy, he's been making apps for a long time and seems trustworthy." or "This is a larger company and isn't likely to be bought just to strip mine their customer data. Additionally they probably have safeguards in place to keep rogue employees from running off with it." None of those is fail-proof, but it's all about risk.