on android apps can also request a list of other apps installed, for example the mcdonalds app can check whether the kfc app is installed. it doesn't give apps broad permission to check for every single app on your device (before android 11 that was actually the case), but apps can definitely spy on their competitors that way.

They can also request location info and other things on a website, and people also just need to click Allow.