How can Threads collect all this info like health, financial, photos, etc when I haven’t given the app permissions

Is the app reaching outside into other apps to get this info?

I didn’t realise Apple allowed app developers to just gather this data and hide it behind a general T&C’s registration form. Didn’t they make Facebook app ask via a pop up for tracking?

​

amp app app developers apple app permissions apps collect data developers etc facebook financial general health hide info permissions photos privacy registration threads