If a website or app asks for unnecessary access to contacts, photos, or location data, it is often a sign of a security risk.