My source is this Tumblr post, which caused me to check my settings because I just got the latest major update.
I found these settings enabled in my discord app:


I know ideally one wouldn’t use Discord at all, but so many of the nice little people in my phone are on Discord.
BTW it’s never a good idea to allow apps access to your contacts, other than your actual phone and SMS apps.
Stay safe!


That’s the bug exactly. It’s kind of a UI glitch; but I found out through Samsung bungling my permissions preferences through a One UI (OTA System) update, that it actually does enable the in-app setting by accident and that this is going to access your contacts if the permission is presently GRANTED, but not throw up a prompt asking for permission if the permission is already DENIED.