AFAIR, “you only need these permissions to scan in the background” is only true for apps compiled for Android < 6.0, that are being used on an Android >= 6.0. If your app is compiled for Android >= 6.0, and used on an Android >= 6.0, you need the location permissions for both foreground and the background.
EDIT: it’s explained in detail on our Android SDK GitHub: