Why does Nav4All require you to let it have access to your WHOLE phone? It seems like a security-risk. This mean the software can access my e-mail, see my pictures, my text messages, my contacts and send it to their server. Why does it need access to anything other than Mobile/WIFI/GPS and other crucial components associated with the service it provides?
Because some lazy assho^H^H^H^H^H programmer couldn't be bothered to work out what was really required. You're right to ask the question but the only way you'll get the ideal settings is to go experiment and see what breaks it.