Cameras in phones are pretty much locked up today, assuming you have an updated version of the OS from a respectable manufacturer. Apps will not be able to access the camera feed (or the microphone) without explicit consent and a visual warning.
The manufacturer might access it, Apple states they don't, Google and Samsung I'm not sure. A bad actor with 0days might too.