Many apps request permission to access sensitive information stored on mobile devices or on your computer. Malware-like apps will take advantage of your contacts and use targeted phishing. Malarmous apps can use the permissions you grant to do serious harm, such as some Coronavirus trackers, or symptoms. The danger comes when nefarious apps have this capability, they can use it to phish your passwords. The only apps that would need this permission are those connected to voice over IP, or a video game that does not explicitly deal with incoming or outgoing calls.”]
Source: https://gbhackers.com/app-permissions-to-avoid-best-practices-according-to-cybersecurity-experts/