The TCC.db is an extremely important database. This file contains all the services (access permissions) that each application has privileges to use. Here we can see a few things. First, we are examining the access table of the /var/mobile/Library/TCC/TCC.db. We can see the services to Camera, which show applications that request access to the camera, and the auth_value column alerts us if the permission was granted (2), selected (3), or denied (0). The service values that are odd, but relevant are kTCCServiceLiverpool represents location data and kTCCServiceUbiquity represents cloud sync.

TCC.db 

select 

access.service as "Service", 

access.client as "Client", 

access.client_type as "Client Type", 

CASE 

when access.auth_value = 2 then "Allowed" 

when access.auth_value = 0 then "Not Allowed" 

when access.auth_value = 3 then "Selected Only" 

end as "Auth Value", 

access.auth_reason as "Auth Reason", 

access.auth_version as "Auth Version", 

datetime(access.last_modified,'unixepoch','localtime') as "Last Modified" 

from access