`device` isn't a required api field. They use it in the case that a user key is assigned to multiple devices you can target just a single device of that user to push a notification to instead of sending to all devices of that user.