Actually there are a lot of information that an app can do by default without asking for any permissions. You can check this opensource iOS app: https://github.com/mysk-research/loupe

For instance: check if some apps are installed or not, and a lot of small informations about your device that can fingerprint your phone with 100% accuracy (like the exact time where the phone was setup).