[fractalwrench]

Android Apps targeting Android 6.0+ need to handle grant/revocation of permissions at runtime. Previous versions of Android would simply ask for the same permissions upfront when a user installed an app.

[slow_donkey]

Yes but it's still possible to target a lower version of Android and request all the permissions up front which must users would agree to

[zamber]

That's exactly what the Mi Home (for Xiaomi IoT stuff) app does. Pesky little buggers.