Completely agree - without standards I expect companies like Comcast and Verizon to release a "free app", with a crazy permissions grab on the device.
push notifications (for service notifications, and of course specialized targeted offers)
access GPS fine location
bind vpn service
read log data
read / write storage
Permissions grab to be justified by:
The app needs these rights so you can host a geotagged live stream of your face while you are watching your favorite show, that people on your contacts list can access. Additionally, the video stream will be sent via a VPN tunnel established to the service provider for enhanced performance. Log data is needed because they need to troubleshoot the app after all.
Companies like Verizon and Comcast will of course only use these permissions for things that are clearly labeled in the EULA and not for their own gain... and if you believe that last statement... my sympathies.
I wonder what percentage of the population actually restricts perms on their IOS / Android devices for the applications they install.