The Google Cardboard SDK says:
Cardboard SDK NFC & External permissions
- android.permission.NFC permission is required by the Cardboard SDK to access Cardboard's NFC tag.
- android.permission.READ_EXTERNAL_STORAGE and android.permission.WRITE_EXTERNAL_STORAGE. These permissions are required by the Cardboard SDK to pair the user's phone to their VR viewer.
Cardboard SDK NFC & External permissions