Since it's a Google-created system, the default is to share everything with everyone, so that Google and apps can hoover up anything they can get. I'm using an app called Bouncer, which turns off permissions and if you need to use one for an app, such as turning location on to call for an Uber...