Tell me what "getting access to a device" exactly means? Is it reading some data, all data, changing some state, etc?
Compare that with an api that asks "Are you ok to disclose your location to example.com?" or "Do you allow example.com to send you notifications?". This is night and day.