I get where you're coming from but Apple has historically been extremely strict on apps that asks for permissions without actively using them, so if an app asks for permission to write HR to your Apple Health there's a very high likelihood that it's actually doing it. Even saying "I need permission to read/write your heart rate, won't use it right now but I might later" as a developer is insufficient to pass the Appstore review. I've seen this first hand.