There are, of course, ways to steal, or otherwise obtain, data about users that do end-runs around the Android permissions model.
But some app developers tried other ways to game the system. When Android 6 started to restrict access to user data, some developers simply delayed upgrading their applications to work with Android 6.
(In the long run, it didn't work. Apps that delayed upgrades got negative reviews, and were moved down the search lists.)
............
Other posts: https://community.isc2.org/t5/forums/recentpostspage/user-id/1324864413
This message may or may not be governed by the terms of
http://www.noticebored.com/html/cisspforumfaq.html#Friday or
https://blogs.securiteam.com/index.php/archives/1468
