Any app beyond the absolute basics uses the (yes, sandboxed) Google Play store. But almost every Google play store app then uses Google Play Services to read your location etc., so you have to give that data to Google's software first if you want any app to work.
To get around it every app (or at least the ones like Lyft/Uber and airline apps that you need to move around) will need to be rewritten to avoid Google Play Services.