I'm not talking about ethics or business models.
I just say that pretty much every site, device and service out there violates the primary rule of the GDPR. They all store data about their users without the users consent.
One of the main points of the GDPR is that the user has to actively agree to storage of data. Making it very clear that storing can not be the default. Yet when you visit the New York Times today, they tell you:
By clicking "I Accept" or "X" on this banner,
or using our site, you consent to the use of
cookies unless you have disabled them.
In one form or another every site, service and device out there is doing exactly this. Making it the
default to store data about the user.