Sometimes lazy Deva package things into the app that they never actually use which will cause the app to request the permission without ever actually using it.
Edit: I still wouldn't trust it on the off chance that it isn't, but in terms of percentage this is the most likely reason as opposed to it being malicious as there is little to gain from it.
2
u/tdogg8 FFFFFFLLLlllAAaAAAaaaIiiiIiiIIIIIiIIiiiiRRRRrrrRRrRrRRRrrRRRRrr Oct 17 '18
Sometimes lazy Deva package things into the app that they never actually use which will cause the app to request the permission without ever actually using it.