As of Android 6.0 they use the Apple permission model where the app doesn't ask at install time, but at run time and has be able to deal with the permission being denied.
I know, I have Android. They will disable features until you give them some over-broad permission or enable tracking on your account. Another example is Google Maps won't let you use its "home address" feature without enabling "Web and App" activity tracking.
They've also worked around their own permissions model. Google Play Services demands a massive amount of permissions, and will yell and scream and try to scare you if you take them away. IIRC, a lot of Google's own privacy invasions are conducted indirectly using that library.
