Most app publishers are halfway credible at best, so it's not much of a problem. Even the halfway credible ones often use SDKs that do this.

Ok but if the SDKs do this they use it themselves to serve ads and don’t sell the raw data, right?