The apps tell you what features they are requesting when you install it. If you give a flashlight app permission to track your location, you deserve to have your information sold.
If you're concerned about this, just switch to Apple. Their draconian app review process prevents a lot of this nonsense, and they encrypt user data in a way that they can't touch it, even for governmental agencies (only as of recent iOS versions).
iOS apps can still track and sell your information, of course, but they need a privacy policy, are more sandboxed than on Android, and permission requests are more noticeable (since they are a popup at the time of the first request, rather than in a list during installation).
