The issue with that is that there are so many different apps that process data in so many different ways.
A phone has a bunch of physical features. Letting a website/app know what's available and request access is a small extension of the hardware APIs with clear defined purposes.

But a financial app is going to have widely different data interests and processing than a workout app, which will be different from a video game, a calculator, a forum etc.
I don't know how it can be normalised into something programmatic.

I guess it's why law and courts are so complex. Sure, laws are written down, it should be easy... but they are regularly challenged and tested.
It's a difficult problem to solve.

The ideal way would be to cut the legalese bullshit in the privacy policy.
However, that's a legal document, so it needs the legalese.
It actually needs an honest human readable summary that sums up what's collected, why it's used etc.