CyanogenMod ships with a "privacy guard" feature that shuts off any intrusive permissions for an app unless you whitelist it, regardless of what the app claims to want from you.