Permissions like location, contacts, or SMS need a clear, declared use case tied to core app functionality — Google reviews these more strictly than most other policy areas.
Requesting a broad permission (e.g. background location) for a feature that could work with a narrower one is the most frequent trigger.
"Your app requests permissions that are not adequately declared or justified for its core functionality."