Not nearly far enough.
This review doesn't go anywhere near far enough. What about contacts? What justification do 90% of apps have for requesting access to contacts? To me contacts are much more sensitive data. Why on earth does a Flashlight App need access to my contacts. Is it somehow going to send Morse code messages via the flashlight? Most of my Android devices can have access to phone logs or SMS as the devices aren't phones so don't support these features but they do support contacts for e-mail and other messaging.