The app must request the minimum number of permissions required to function.
The review team will be paying especially close attention to the list of permissions that Google considers dangerous, which includes camera, location, microphone, reading and writing external storage, and others.
For more information about permissions, see https://developer.android.com/guide/topics/permissions/overview.html.
$ aapt dump badgingand search the output for
There must be a rationale behind every permission your app requests in the app manifest.