The job of an authenticator is to generate tokens. It doesn't need to collect data like your phone's contact list, the photos and videos on your device, plus your phone number and physical address like Google Authenticator does. 

Please switch to a privacy focused authenticator like the one included with  nostr:npub1e3gvujkp43mxla5094jp74glse5e4daspammvpnr7thj3agzk48s09frly Pass.

#privacy

https://www.pcmag.com/reviews/google-authenticator