KDE Connect requests the following permissions on Android, for the following reasons:
- INTERNET: Even though we never connect through the internet (only through local network), Android requires this permission even for that.
- STORAGE: To save received files and to read files to send.
- CONTACTS: When you receive a phone call or SMS, KDE Connect looks up the caller/sender on your contact list to display the contact name instead of the number.
- NOTIFICATIONS: For the notifications plugins to be able to forward the notifications to your desktop.
- SMS: For the SMS plugin to forward SMS to your desktop and to be able to reply them.
- BATTERY: For the battery plugin to report the battery on your desktop.
None of the information that KDE Connect can read ever leaves your phone unencrypted, and never ever reaches the internet at all.
In the future, all these permissions will be made optional, so you can decide not to even allow KDE Connect to access some of this data. As of now, only the notifications permission is made optional.