title: User gets permissions request that are not included in the manifest
body: <p>I have Just released an app that has two permission in its manifest file (to show banner ads). "android.permission.INTERNET" and "android.permission.ACCESS_NETWORK_STATE". For testing I tried to install my app from the play market and discovered that the app required Identity, Location, Photo/Media/Files!! There is no such permissions in my manifest file, and I don't need them. Tried my other apps with similar manifest.xml (internet, network state) they are installing without any special permissions.
  Considering new content rating certificate system, i might have problems because in questionnaire i marked that don't need user location.
  Why it requires permissions that I didn't ask?
  I'm using android studio and  build.gradle:</p>
  
  <pre><code> android {
      compileSdkVersion 22
      buildToolsVersion "22.0.1"
  
      defaultConfig {
          applicationId "com.appName"
          minSdkVersion 15
          targetSdkVersion 22
          versionCode 1
          versionName "1.0"
      }
      buildTypes {
          release {
              minifyEnabled true
              proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'
          }
      }
  }
  
  repositories {
      maven {
          url "https://jitpack.io"
      }
  }
  
  dependencies {
      compile fileTree(dir: 'libs', include: ['*.jar'])
      compile 'com.github.PhilJay:MPAndroidChart:v2.1.0'
      compile 'com.melnykov:floatingactionbutton:1.3.0'
      compile 'com.mcxiaoke.volley:library:1.0.+'
      compile 'com.nispok:snackbar:2.10.2'
      compile 'com.android.support:cardview-v7:22.2.0'
      compile 'com.android.support:recyclerview-v7:22.2.0'
      compile 'uk.co.chrisjenx:calligraphy:2.1.0'
      compile 'com.google.android.gms:play-services:7.5.0'
      compile 'com.android.support:appcompat-v7:22.2.0'
      compile 'com.github.markushi:android-ui:1.2'
      compile 'com.afollestad:material-dialogs:0.7.3.1'
  }
  </code></pre>
  
  <p>Manifest.xml</p>
  
  <pre><code>&lt;?xml version="1.0" encoding="utf-8"?&gt;
  &lt;manifest xmlns:android="http://schemas.android.com/apk/res/android"
            xmlns:tools="http://schemas.android.com/tools"
            package="com.AppPackage" &gt;
  
      &lt;uses-permission android:name="android.permission.INTERNET" /&gt;
      &lt;uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" /&gt;
  
      &lt;application
          android:name=".MyApplication"
          android:allowBackup="true"
          android:icon="@mipmap/ic_launcher"
          android:label="@string/app_name"
          android:theme="@style/AppTheme"
          &gt;
          &lt;activity
              android:name=".MainActivity"
  
              android:label="@string/app_name" &gt;
              &lt;intent-filter&gt;
                  &lt;action android:name="android.intent.action.MAIN" /&gt;
  
                  &lt;category android:name="android.intent.category.LAUNCHER" /&gt;
              &lt;/intent-filter&gt;
          &lt;/activity&gt;
          &lt;activity
              android:name="com.google.android.gms.ads.AdActivity"
              android:configChanges="keyboard|keyboardHidden|orientation|screenLayout|uiMode|screenSize|smallestScreenSize" /&gt;
  
          &lt;meta-data
              android:name="com.google.android.gms.version"
              android:value="@integer/google_play_services_version" /&gt;
  
          &lt;activity android:name=".Prefs_Activity" &gt;
          &lt;/activity&gt;
          &lt;activity
              android:name=".Guide_Activity"
              android:label="@string/title_activity_" &gt;
          &lt;/activity&gt;
          &lt;activity
              android:name=".Picker_Activity"
              android:label="@string/title_activity_" &gt;
          &lt;/activity&gt;
      &lt;/application&gt;
  
  &lt;/manifest&gt;
  </code></pre>
  
  <p><strong>Update:</strong></p>
  
  <p>Thanks to CommonsWare's answer I have found "manifest-merger-release-report.txt", and who uses these permissions. These are maps and wallet APIs. 
  I have separated play service from this:</p>
  
  <pre><code>    compile 'com.google.android.gms:play-services:7.5.0'
  </code></pre>
  
  <p>to this(all I need for now):</p>
  
  <pre><code>    compile 'com.google.android.gms:play-services-analytics:7.5.0'
      compile 'com.google.android.gms:play-services-plus:7.5.0'
      compile 'com.google.android.gms:play-services-ads:7.5.0'
      compile 'com.google.android.gms:play-services-appindexing:7.5.0'
  </code></pre>
  
  <p>Results:</p>
  
  <ul>
  <li>removed unnecessary permissions</li>
  <li>apk size reduced up to 500kb</li>
  <li>started to take seriously API separation</li>
  </ul>
  
  <p><img src="https://i.stack.imgur.com/k8Xt8.png" alt="Play Market apk update screenshot"></p>