When an app asks for permissions, the OS should not only let you answer yes or no. Every category should have a "yes, but feed the app fake data" option.

Want my contacts for no reason? Have these generated fake ones! Wanna listen to my microphone? Here's random ambiance sounds! Location? I'm on a tiny 5x5m island!

Hell yeah! Put it all in your databases mfers!

Actively punishing services wins over boycotts any day. Didn't want that junk in the database? Don't ask for it!