Sounds more like the app presented a standard request for location access, which is required for scanning nearby devices to be able to find and pair the mug with an app. E: For the paranoid: https://developer.android.com/develop/connectivity/bluetooth/bt-permissions