Conversation

The account setup process prompts for a bunch of permissions it shouldn't need with plausible fake reasons to give them, including permission to harvest all your SMS messages.
2
40
Then it won't let you message anyone without exposing your contacts to it. You have to get them to message you first to create an open chat to bypass, or get a third party to share a contact link to you.
1
41
It gets worse. Then, it won't let you listen to voice messages you've already received without giving it permission to access all your data - presumably it wants to save to a file then play from the file.
2
27
Replying to and
They'll be forced to move to API 30+ on the Play Store in the near future. API 29 began phasing out legacy shared storage access but provided a way for apps to opt into the legacy system. It was supposed to remove it like API 30 does but there was a successful backlash campaign.
1
There's still a coarse-grained way to ask for access to photos, unfortunately. That should really go away too. They haven't been nearly as aggressive as they should be in forcing apps to request case-by-case access to files and directories. Was pushed for years but hardly used.
1