For the precise list I’d recommend a more empirical approach (i.e. actually try it) but going over the permissions, here are ones that you shouldn’t need (i.e. a blacklist approach):
ACCESS_COARSE_LOCATION
ACCESS_FINE_LOCATION
CAMERA
READ_CONTACTS
RECORD_AUDIO
USE_FINGERPRINT
VIBRATE
WAKE_LOCK