It is remarkable that anybody building an application with the stated purpose of securing someone's privacy would launch with this permission.

I would be careful of using the service further after this. I doubt it was only required for generating bug reports.

I wonder what use you think Cloudflare has for your voice data.

It's not about what I think, it's about why CF would request access to your microphone data in favor of giving DNS Service at 1.1.1.1. In the Android app they advertise: "Greater privacy". What privacy does it provide giving application access to microphone?

They explained what was happening and that they're changing it. Further conspiracy theories are unjustified imo.

You can sell microphone data for correlating ads you see on TV to sites you browse to.

I know what you can do with the data. My question was more specific than that: What use does Cloudflare have for the data? Cloudflare, the company that already has a hugely profitable business, excellent privacy-friendly track record, etc.

I'm always amused when there's suggestions that a company like Cloudflare could in any way benefit from that. To recap, the company that has access to your DNS queries would embed a Microphone spy in their Android app, for a short period of time, risking their massively profitable enterprise business, just so they could shadily resell the few days worth of data they may have gotten for that.

There's so many good conspiracy theories to think about. Why would you choose this one?

You're not just giving microphone data to Cloudflare though but to the third party SDK using it (which CF may or may not have the source to and may have very different goals, security policies and so on than CF themselves).

It’s not just about what CloudFlare could do. CloudFlare is supposedly doing this for privacy reasons but they have third party code in thier product that we don’t know if they have the source code to. Neither you nor they know what this third party code is doing.