Why does the SDK report success when user denies permissions?

This is intended behaviour.

This is intended behaviour. Once the permission screen has been raised, the connection is treated as a success regardless of which permissions the user granted, on both Android and iOS/Apple Health. There's no reliable way to know what a user approved, and failing would leak that information.

Don't rely on the connection result. Instead, request data and check what actually arrives to determine which permissions were granted.

See permissions mapping for what each permission covers.