In case of Android what you only need is that your application can read notifications (and has notifications/accessibility permissions). E.g. all whatsapp messages go through it...
> In case of Android what you only need is that your application can read notifications
This "only" is much harder to do than sending a Javascript URL.