Big apps like Facebook, Whatsapp and YouTube try to access everything - camera, microphone, location, contacts, SMS and phone history, etc. You might be surprised at some of your other apps though. Most crypto apps will want access to your camera for scanning QR codes, but how do you know they aren't using the camera for anything else? Many exchange apps want to track your location. Many browsers want access to your microphone. These apps will do anything to try to spy on you. It's worth pointing out that you can quite safely disable all these permissions if you aren't using the function behind them. For example, although Firefox wants access to your camera, microphone and location, if you aren't using it to upload your voice to a website or use Google maps or similar, it will work just fine if you disable all these things.
This page has instructions on how to access app permissions on various platforms: https://www.wired.com/story/how-to-check-app-permissions-ios-android-macos-windows/. I would suggest taking a look at what apps you have which are monitoring your activity, and either removing their permissions or switching to a less invasive app altogether. It's also worth turning off automatic updates - that way if an update tries to give an app more permissions, you have to manually confirm (or deny) it first.