Well, I'm guilty of not looking on my own device.
VMS.apk is part of the distro. Kinda odd that the package name starts with com.asurian. rather than com.vzw. or com.verizon. though - maybe Verizon farmed out the app development.
And apparently the packages.xml format has changed since the last time I looked at it, but the app manager lists privileges anyway. VMS.apk has "READ_LOGS" privs along with network connectivity. It could easily rat you out with along with a specific device ID even without root privileges.
Very strange that it would ask for root - it already has quite an extensive set of privileges.