This is done manually via privacy focused app reviews by actual developers who used each app. They check the app functionality and report the expected permissions ideally needed to achieve that functionality.
This review process is currently not open to public. We grant that access to selected users.
In the future, we are planning to allow everybody to submit privacy reviews of apps, and we will then have a system to handle such reviews and resolve disagreements among reviewers.