I had an interview once with a company that essentially wrote tracking libraries for Starbucks's app. Everything you mentioned in your post is pretty much exactly what the app did. Their nonchalance around their extent of tracking was chilling to say the least.