App permissions should make sense for what the app is supposed to do.
Review access to location, camera, microphone, contacts, photos, files, notifications, and other sensitive features.
Revoke permissions that are unnecessary and remove apps you do not recognise or no longer need.
If you suspect the app was used to access sensitive information, secure the affected accounts as well.