I am using search-based Kiss Launcher. I trust it because it is open source and verifiable and has minimal permissions:
- read your contacts
- directly call phone numbers
- read phone status and identity
Those three are needed to show my contacts with all other search results and to dial them without opening the dialer app. And it’s totally unnecessary and revokeable if you want to be this way. - expand/collapse status bar
- request delete packages
- query all packages
These are obvious.
There are launchers with even less permissions tho.