Can you maybe give us a ls -Al of /var/lib/radicale and /var/lib/radicale/collections to double check the permissions? I just looked at the systemd documentation and the service definition looks ok.