If an app can scrape phone info without prompting for extra permissions, you can bet the app dev is scraping that data and storing it alongside session data for security purposes.
Web browsers are much more sandboxed. Still plenty of ways to fingerprint tho
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments