That's less ASO and more product design. It's not only about asking for minimal permissions, but also about explaining to the user when and how these are used. There's a whole theory about it. :)