As an app, do what you have to do, but disclose what you're going to be doing so people can make informed decisions. Otherwise it's a slippery slope. Here, it's "just the number", the next app claims "oh, it's just emails" or "oh, it's just names" ... Where do you draw the line? My contacts are private data and at least I want to be informed before anyone grabs those out of my phone.