I think there is some confusion because the manifest is very clear to developers who need permissions. However, when installing users, the permssions categories are presented, and not a complete list of individual permissions. I agree that a full comparison of individual permissions with permission categories would be very helpful. Here are the categories that are required for one sample application during installation:
All permissions:
Development tools: send Linux signals to applications, close all background applications, limit the number of running processes, enable application debugging
Your personal information: write browser history and bookmarks, read browser history and bookmarks, read contact details, add or change calendar events and sen d guest email address, write a user dictionary, read owner data, read user dictionary, write contact details, select widgets, read calendar events, owner’s owner data.
Services that cost you money: send SMS messages, call directly numbers
Your location: the temptation of location sources for testing, access to additional data from the location provider team, rough (network) location, fine (GPS)
Your messages: Exchange messages and receive synchronization notifications from Google sever, send WAP-PUSH-received broadcasts, edit SMS or MMS, read instant messages, receive WAP, record instant messages, send SMS transmission, read SMS or M MS, read email attachments, receive SMS, receive MMS
Network connection: view network status, send broadcast messages to the application, send a heartbeat to the Google Talk server, broadcast message data for applications, check license sales, create a Bluetooth connection, view Wi-Fi status, Allow the application to receive the cloud to device messages from the application service full internet access
Your accounts: Android services, Orkut, act as an authenticator account, Google App Engine, Picasa Web Albums, customized browsing accounts, Google spreadsheets, Go ogle Notebook, Google Checkout accounts, Google Groups, opening known accounts, act as AccountManagerService, Knol, Blogger, Google Checkout QA accounts, Google Health, Google Checkout, Sandbox tabs, Google Docs, Google Book Search, Google News, Android services, iGoogle accounts, Google Talk, YouTube, account list management , JotSpot, Dodgeball, access other Google services, Google Voice, AdWords, YouTube usernames, use credentials for authentication of your account, Google mail, AdSense, Google Webmaster Tools, Google Maps, access to all Google services, contact details in Google accounts, Google WiFi, Google Calendar, Google mobile applications, Google Base Google Finance
Storage: modify / delete the contents of the SD card
Phone calls: change phone status, intercept outgoing calls, read phone status and identity
Hardware controls: shoot, control flashlight, test equipment, record audio, change sound settings, control vibrator
System tools: enable reception of Wi-Fi multicast, delete all applications cache data, receive information about safe storage, change the initial data use settings, force stop other applications, delete shortcuts, disable key lock, read synchronization statistics