Re: Android M will also include much finer user controls as to what apps can access
+1 for CyanogenMod on an S3. I bought one specifically for this purpose. The phone was rooted and the new OS installed within half an our of arrival and I've no regrets about it. Also, put F-Droid on there and don't install the Google apps and you're as close to keeping the Chocolate Factory out of your business as you can be while still on an Android phone.