can we write an app to get info without user giving any permission ?

Just read this post on Reddit,

Check it out and you will find that the scammer somehow becomes friend and tell to not install the apk, else he will get all message. Also he can get credit card info from Flpkart app !!

I am curious, can we write an app to get info without user giving any permission ?

AnandGupta said:

Also he can get credit card info from Flpkart app !!

Click to expand...

I guess that this hack works on older phones and it requests the EXTERNAL_STORAGE permission.