Android and iOS both require user permission for apps to access contacts or location.

Are there other platforms that can't even manage this basic level of user protection?

As long as the application is made aware of the permissions and can prevent functioning when they get denied, that doesn't really help much. It's the choice between getting mugged or never leaving the house.

The ability to deny permissions without the app noticing or filling it with fake data doesn't exist on either system.

Yes, Windows.