This is why I use an app called DVasive which tells me when my mic or camera is in use. It's pretty good at figuring this out it seems, although I haven't found any nefarious apps yet that use my mic or camera unexpectedly (I've been using the app for a couple of years). It probably wouldn't work for vendors or other rogue ways to get access to my phones devices however.