Seems like something that you should sue over, but that's easier said than done for most folks. If you want to try and help maintain your privacy, use a virtual device or a "burner" that's only used to access what's necessary and for nothing else. Keep them off unless you actively need them and deny all unnecessary permissions. It's not perfect but it's less bad than giving them even more information to datamine for profit at your expense.