I have a to do list app installed that allows you to add a profile photo. I added the image without ever being asked for access to my photos.
To my understanding, apps that can view your photos should be listed under settings / privacy / photos. This particular app isn’t listed there, what is going on?