This question already has an answer here:
Current, major and trustworthy ROMs only please. I'm not implying that smaller ROMs all contain malware - 99% probably don't, but for something like this I want to be as sure as possible.
A simple revocation like CM used to have in version 7 would be fine, though blank data would be preferable.
I'm aware of Xprivacy, but prefer something simpler and built-in. Xprivacy's communication with its server is a negative as well.