Sneaky apps read messages despite denied permissions

Even when you deny SMS permission, apps like Truecaller can still read messages. They use workarounds or get data from other apps. How do they do it?