It was hard (and in some cases it still is) but I have started to just not the use apps and services that need blanket permissions. Like I didn't have TrueCaller on my phone until I moved to iOS where it surprisingly works w/o Contact permission. The last time I had checked it would simply refuse to work on Android w/o Contact permission. And I didn't give Uber location permission till it started to ask for "While Using the App" permission. Until then I used to manually enter the address.

Similarly, I have decided not to use many Dropbox apps that need R/W permission to entire Dropbox instead of any one folder that I can choose.

I think we kind of need to show these apps and services their place, so to speak.

xprivacy is the single reason I continue to root my phone :|