CCoF

test access to protected storage

read calendar events plus confidential information, read your contacts, add or modify calendar events and send email to guests without owners' knowledge, modify your contacts

approximate (network-based) location, precise (GPS) location

view network connections, view Wi-Fi connections, full network access, Google Play license check, receive data from Internet

read Google service configuration

modify or delete the contents of your USB storage

take pictures and videos, control vibration

run at startup, prevent phone from sleeping

android.permission.FOREGROUND_SERVICE, android.permission.POST_NOTIFICATIONS, android.permission.READ_APP_BADGE, android.permission.READ_MEDIA_AUDIO, com.anddoes.launcher.permission.UPDATE_COUNT, com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE, com.google.android.gms.permission.ACTIVITY_RECOGNITION, com.htc.launcher.permission.READ_SETTINGS, com.htc.launcher.permission.UPDATE_SHORTCUT, com.huawei.android.launcher.permission.CHANGE_BADGE, com.huawei.android.launcher.permission.READ_SETTINGS, com.huawei.android.launcher.permission.WRITE_SETTINGS, com.majeur.launcher.permission.UPDATE_BADGE, com.oppo.launcher.permission.READ_SETTINGS, com.oppo.launcher.permission.WRITE_SETTINGS, com.sec.android.provider.badge.permission.READ, com.sec.android.provider.badge.permission.WRITE, com.sonyericsson.home.permission.BROADCAST_BADGE, com.sonymobile.home.permission.PROVIDER_INSERT_BADGE, io.echurch.christschurchofflagstaff.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION, Can receive cloud messages, io.echurch.christschurchofflagstaff.permission.MAPS_RECEIVE, me.everything.badger.permission.BADGE_COUNT_READ, me.everything.badger.permission.BADGE_COUNT_WRITE