I just found and enrolled in CruiseCritic, so forgive any show of ignorance. But I saw the discussion of Princess' Medallion App, read the first couple pages from years ago and it's STILL the most intrusive app of any that I've seen (not just related to cruises or travel topics but any app for any purpose). The permissions that it requests (demands, actually!) are pervasive, wanting access to virtually everything.
It requires permission to use SMS not just for updating information but for all their promotions and including their business partners.
I picked my cruise because it offered good destinations and itinerary, but I think afterwards I'll retract permissions and then delete it entirely.