I’m traveling to Barcelona and when I leave the train and walk on the platform I receive a notification from Cabify (Like Uber/Lyft) referencing the station where I am.
I only gave permissions of location only when using the app, and I did not used it in months.
How is it possible?
That hasn't been the case since android 13.
An app must ask your permission and you must grant it. And it explains exactly why in the permissions description. Because it may be used to determine your location.
I know, I wasn't talking about permissions in general.
Bluetooth and WiFi aren't grouped in with location permissions since android 13, they both fall under nearby devices.