Funny. You consented as much to Microsoft gathering your personal information as you did to Google. Have you ever wondered how any app that interacts with your communication services such as email, sms, calling could possibly work without, well, knowing what the hell is going on? Try giving a voice command to call contact x without those permissions. 1, voice command cannot be heard, because no microphone permission. 2, cannot find contact, because not contact search allowed. 3, cannot call contact because calling not allowed.
The permissions as they are stated in the store and in apps are mostly useless as a way to determine what the app actually does. Suppose I publish an app which sorts your contacts by hair color. Color comes from user images and determining that color is done server-side. The app requires permission to, among others, send those contact images to the server for analysis. That is what I state in the permissions overview. Perfectly normal, nothing sinister and you allow this. By doing so you actually granted the app permission to send your entire contact list with all information attached to some unknown server. You are just hoping that isn't happening when you allow those permissions to be given.
If you want to be thorough or paranoid, check the actual network traffic. Don't attack a company based on your interpretation of app permissions without any evidence of unethical, indecent or indeed any sort of behavior. As far as I can tell you don't even know if the app even makes use of those permissions, just that they are given.