Q:

App permissions different on web and phone

Here's the two different Permissions on web vs play store.
Web
App Store

Ive looked at the build/intermediate.manifests folder. There's no EXTERNAL_STORAGE in the Manifest

Same for the outputs/logs/manifest-merger files.

BNelow is the merged manifest

<uses-permission android:name="android.permission.INTERNET" />
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>
<uses-permission android:name="android.permission.WAKE_LOCK" />
<uses-permission android:name="com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE"

/>  
      
<permission
    android:name="com.formulaone.production.permission.C2D_MESSAGE"
    android:protectionLevel="signature" />

<uses-permission android:name="com.formulaone.production.permission.C2D_MESSAGE" />
<uses-permission android:name="com.android.vending.BILLING" />

Is there any reason why this is different on web s app?
edit : Wrong permissions at Google Play
The app does use shared prefs, does that add the external_storage permission?

A:

The Permission Request depends on many factors. Like if you're sending some data which requires storage permission, then you need to add READ_EXTERNAL_STORAGE permission
Also, the permissions on Web and Android varies
I think you are using wrong Android permissions
Here's a quick guide for Android Permissions

