Remember that permissions are generally broad. Just because an app has permissions for your photos/media, it doesn't mean it's stealing your photos--it may be something like being able to save a screenshot, or allowing you to share an image. Another example is the camera permission--it isn't always about using the camera to take pictures. Flashlight apps need the camera permission, because the LED flash is part of the camera.