I found the following log entry. (And to be clear, myApp does have removable volumes checked in Files and Folders):
Refusing TCCAccessRequest for service kTCCServiceSystemPolicyRemovableVolumes from client Sub:{com.myCompany.myApp}Resp:{<TCCDProcess:identifier=com.myCompany.myApp, pid=5311, auid=0, euid=0, responsible_path=/Users/.../path/to/myApp/executable, binary_path=/usr/sbin/installer>} in background session.