Google has changed their policy regarding the following permissions: READ_SMS, SEND_SMS, WRITE_SMS, RECEIVE_SMS READ_CALL_LOG, WRITE_CALL_LOG, PROCESS_OUTGOING_CALLS Only the default phone or messaging apps can use these permissions...
Starting from Android 6 there is an Api from Google which can Listen for a Incoming SMS for you. But you do not need any Permission for this. The SMS ends up in the Devices standard SMS App but your app can do an Phoneauthentification using an SMS from your Server. Usually the way would be: 1...