There's a difference between spyware and a library that sends the company usage details about how you use their app. Even apps with ads are only forbidden from using bespoke APIs (other than the built-in prompt "allow <x>" to track you across other apps and websites) to track users' activity and correlate it with other sessions.