Hasn't it been demonstrated that apps can track user location even without requesting location or WiFi access?

  Android apps can track a user's location and glean potentially
  private, personal information – such as where you work or live
  – just by monitoring the internal sensors. More importantly,
  they can do this without ever needing access to a device's GPS
  or Wi-Fi permissions.

Source: Are your apps secretly stalking you? Android phones can be used to track you without permission [1]

[1] https://www.wired.co.uk/article/android-apps-can-track-you-w...