Apps operate in sandboxes. We would need actual information to show that the app was being given special secret permissions, and Apple and Google would likely refuse or at least make public what was being asked of them, in order to maintain their own reputations in being honest about what they track and what they don't.

There's no value in assuming everything is conspiratorial. You'll go crazy.