The latter. I don't have specific examples in mind, just that if you do not trust a company's data collection policies, the collection capabilities of an installed program are much greater than when viewed through a web browser. See [1] for an example from a few of years ago.

[1]: https://gizmodo.com/facebooks-messenger-app-logs-way-more-da...