@allsyed I can't find any information on what exactly Vigilante is. Is it a stock app? Stock Android is definitely tracking you, but randomly accessing your camera would be implemented on the OEMs part. Cause that's a hell of a lot of traffic and storage for something that 98% of the time will be the inside of a pocket, a ceiling, or maybe part of your face every now and then. Not worth obliterating your security by using a custom ROM on a phone that doesn't allow bootloader relocking.
1/2
@ThreeBadgersInATrenchcoat I am using nebulo from frostnerd
@ThreeBadgersInATrenchcoat it is app from fdroid.
Source code : https://github.com/FunkyMuse/Vigilante
If you want to improve your privacy from these stock apps, you might be able to flash LineageOS. Be warned, though, this will utterly destroy your security. If you want security and privacy, get a Pixel 4a or newer and flash it with GrapheneOS.
Back within the constraints of the stock OS, though, make sure you have revoked all the app's permissions. Try to use an app firewall like NetGuard and block its internet access, too. Its a system app so this may not be effective, but its worth a try.