I tried PCAPdroid recently and that seemed good

Holy fuck I hate HOA's/condo boards

Checked Alarm's privacy policy on their website... and it's kind of sketch. The big ol' "Privacy" link takes you to a page basically saying "We don't sell your info", which OK, cool.

However, scroll all the way to the bottom, and there's another privacy section. That one details what they do with info using their service.

Quick Bing AI summary:

Alarm.com's Privacy Policy outlines how they handle your personal information when you use their services. Here’s a summary in plain English:

Information Collection:
    Alarm.com collects and stores Personal Information from or about you. This includes details that can be used to uniquely contact, identify, or locate you.
    When using the User Interfaces (such as their website or mobile apps), you may provide Personal Information like your name, address, phone number, email, location, or zip code.
    Additionally, when using their Services, you or your Authorized Service Provider may provide additional information (e.g., home or business details, system configuration, sensor names, etc.) to personalize your experience.

Types of Data Collected:
    Performance data from security devices monitored by Alarm.com.
    Electrical usage, heating/cooling information, light settings, and more.
    Alert logs and other relevant data.

Purpose of Data Collection:
    To provide you with the best interactive security, energy management, video monitoring, automation, and wellness services.
    Personalization of services based on the information you provide.
    Alarm.com may also receive data from their partners (like emergency contact info) to enhance their services1.

Remember that data privacy practices may vary based on your region and use of the app2. Always review the full privacy policy for complete details1. If you have specific concerns, consider reaching out to Alarm.com directly for clarification.'

This doesn't show individual requests, but it shows the tracker libraries and permission demands: https://reports.exodus-privacy.eu.org/en/reports/com.alarm.alarmmobile.android/latest/

Does this app itself do the security surveiling or why does it need access to the camera, microphone, location, user movement, biometrics, contacts etc.?

RethinkDNS can show you where it's connecting via firewall logs and has PCAP

Set up PCAPdroid with MITM.

For me I just refuse to use any app to access a service. I can tolerate websites.

Adguard can do that if you setting it in low level settings & activate HTTPS filtering for certain apps