There should not be an app permission to export contacts list in the first place. If an app needs your contacts, there should be a way to export them offline and upload the contacts file. If a user is not technically adept to do that, they are clearly also not adept to judge the ramifications of pressing the "allow" button on the contacts permission dialog.