Comment by jlund

The Contacts permission is completely optional, and contact information is never stored: https://signal.org/blog/private-contact-discovery/