The only thing we ask for permission to use is the camera for purposes of imaging barcodes & documents. This seems to work really well, with the only caveat being that iOS will not grant access to most (any?) privileged resources unless the site is secured with TLS.