I wouldn't be surprised is many data trackers don't pay attention to any of the permissions and agreements. It's hard to validate they aren't in compliance and it's hard for most people to even challenge these businesses.
organizations like la quadrature validate and challenge those businesses. Europe is relatively strict on this subject.