DemDex "captures behavioral data on behalf of Websites and advertisers and stores it in a 'behavioral data bank.'"
uMatrix blocks it for me, but this shit could harvest banking credentials??
It's not that it happens or could happen, the problem is that when credentials are leaked the user gets all the blame: "not our fault, you probably had a virus on your device", and most users will believe it.
The only unclear thing is the distinction between processor, manager and collection of data. That's because it's narrow in scope.