That shouldn't matter. The OS should let you create a fake photo collection which gets shown instead of the real one to apps you don't trust. This idea is obvious and very old. At least in the case of Android contact lists people have been asking for this for as long as I can remember. Why has it still not been implemented on iOS at least? Or has it now been implemented? I've been avoiding both Android and iOS because of stuff like this.
Does anyone want to sell me a phone that runs Debian with the option of running Android or iOS in a VM with appropriate management functions that would make it very hard for an app to misbehave?
> The OS should let you create a fake photo collection which gets shown instead of the real one to apps you don't trust.
Many times yes. And even more important, the contacts!
Now it's you have to "give the app all the contacts" even if you know you want to give it only one or two. And of those one or two, just the number. Not the picture, not the date of birth, not the address.
In short we should be able to pre-select what any app actually sees of of all the databases, records and fields.
It sounds too technical but it could be done properly.
Does anyone want to sell me a phone that runs Debian with the option of running Android or iOS in a VM with appropriate management functions that would make it very hard for an app to misbehave?