I check "permissions" religiously. I DO avoid apps that say they access to my contacts, such as a weather app, why is it necessary to have access to my contacts, to send them spam? If the app is used for sending my contacts anything, I have no problem.