そういうことです.
BluetoothやWi-Fiのような近傍のデバイスをスキャンする系のAPIは使いようによっては位置情報特定できちゃいますもんね.
To provide users with greater data protection, starting in this release, Android removes programmatic access to the device’s local hardware identifier for apps using the Wi-Fi and Bluetooth APIs. The
WifiInfo.getMacAddress()and theBluetoothAdapter.getAddress()methods now return a constant value of02:00:00:00:00:00.To access the hardware identifiers of nearby external devices via Bluetooth and Wi-Fi scans, your app must now have the
ACCESS_FINE_LOCATIONorACCESS_COARSE_LOCATIONpermissions:
WifiManager.getScanResults()BluetoothDevice.ACTION_FOUNDBluetoothLeScanner.startScan()Access to Hardware Identifier- Android 6.0 Changes | Android Developers
ということで,Android M(API Level 23)以降はACCESS_COARSE_LOCATIONかACCESS_FINE_LOCATIONのpermissionが必要です.
