Photos/Media/Files and Full Network Access
If an app has access to your data and the Internet, there's actually nothing to keep it from doing such things indeed. But if it did, it probably won't go unnoticed (as it would use bandwidth for that, someone surely would have noticed). Which is one reason one should prefer apps already used by many people, and from a trustworthy source.