An app may ask to use a microphone, camera, photo selection, contacts or device location. The operating system mediates protected capabilities, while the app may also receive information you type or that its service already holds.
A permission list is therefore not a complete inventory of personal data. Denying location access does not erase a delivery address or stop every inference from an internet connection.