If I were to write an app that actually needs a helluva of permissions, I'd write a lengthy explanation, one by one, right in the app description, of why I need a particular permission and what data (if full network access is required) is sent to the servers, if any.

This is a lot of user's private data the app potentially can have full access to:

SMS read your text messages (SMS or MMS) receive text messages (SMS)

Phone read phone status and identity

Photos/Media/Files read the contents of your USB storage modify or delete the contents of your USB storage

Storage read the contents of your USB storage modify or delete the contents of your USB storage

Wi-Fi connection information view Wi-Fi connections

Device ID & call information read phone status and identity

Other bind to an accessibility service receive data from Internet view network connections full network access run at startup control vibration prevent device from sleeping

Not accusing this app that it does any nefarious things, but not to appear shady, it's better to be minimalistic in permissions and be fully transparent with users.