In Android: It is not asking permission to access GPS, it's just telling you that it will access GPS. Your agreement is not needed. In iOS: The application will ask GPS access, in which you can give or deny the access. Even if you agreed in the first place, you can deny its access later from privacy setting.
The easiest way to make money on Android is by creating malware. Thanks to Java-like architecture, anyone can decompile any .apk, recompile with malware and resubmit to Google Play under different account.