When an app asks for permissions, the OS should not only let you answer yes or no. Every category should havev a "yes, but feed the app fake data" option.

Want my contacts for no reason? Have these generated fake ones! Wanna listen to my microphone? Here's random ambiance sounds! Location? I'm on a tiny 5x5m island!

Hell yeah! Put it all in your databases!

Actively sabotaging and punishing services wins over boycotts any day.