sing-box and official graphics clients do not collect or share personal data, and the data generated by the software is always on your device.
The broad package (App) visibility (QUERY_ALL_PACKAGES) permission is used to provide per-application proxy features for VPN, sing-box will not collect your app list.
If your configuration contains wifi_ssid
or wifi_bssid
routing rules,
sing-box uses the location permission in the background
to get information about the connected Wi-Fi network to make them work.