Someone had that in the early days of Android. If you denied an app access to your contact list, the app saw a list of fake contacts.