There has been intentional spying (telemetry) in Debian too, Firefox for example, as well as Cura (3D printing app, although they eventually stopped that).