I'm not even sure why would they even need to see your phone.
All these idiots use cloud, just requesting data from iOS/google is sufficient in most cases. I think they don't even have to ask, they gotta have direct api access.