This is why the os shouldn't let apps know what permissions they have. Apps should have access to an empty address book or fake gps coordinates if they don't have those permissions.