Google apps can talk to each other even without internet permissions. So even one app having internet permissions is enough to leak your data