Since Android Marshmallow(API 23) an app must ask for permissions at runtime and the user can revoke permissions at any time, so if an app is running and the user goes to sy