My assumption about an SDK like that is that it's getting that access through some assumed mean(s) that the user just clicks past without thinking.