A friend used to develop apps for Android and iOS platforms. WRT privacy lockdown and default permissions: Android < iOS < degoogled variants of android focusing specifically on privacy, security, or minimalist obscurity (e.g., graphene, lineage, etc). Retail Android is by far the worst choice for privacy, because Google’s primary motivation for contributing to the project was always instrumentation of a mobile platform for data harvesting and ad delivery.