Connect each permission to a feature
Location is understandable for prayer times and Qibla, but every permission should have a clear relationship to a feature. Explaining the reason before requesting access and supporting approximate location are positive signs.
Read the privacy policy
Check what data is collected, which providers receive it and how an account can be deleted. Vague language or missing contact details deserve careful consideration.
Keep control in device settings
Both iOS and Android let you change location and notification access later. Disable permissions for features you do not use, keep the app updated and use a unique password for your account.