Access to user data and native vs. web are orthogonal concerns.

E.g., on iOS you don't have to give an app access to any data, but can still have the app installed -- access is a post-install, standardized dialog when the app requests permission.

Similarly you could easily invent web apis that would give access to data (like location, which already exists).