Well, let's just say I first hand saw how a developer can literally siphon everything that's on your Android phone, actual content of text messages, call list, contacts, literally, for real. I was quite shocked to be honest, although not that surprised at the same time.
Android users, better really pay attention to those permissions and really think what you are allowing (if you are on Marshmallow or newer). Also, an app "company" might be in, let's say, the US, but the actual developer of the app itself can be from some other countries (like China).
