Your ISP does, Google does, but I don’t think Apple has them in an identifiable way
these days ISPs only have the list of the IPs you have visited. With many things hosted on AWS and hidden behind Cloudflare, this list is almost useless.
CloudFlare probably has a list of most websites you have visited, though. And the contents of all CloudFlare-"protected" pages get proxied through their edge. They are effectively a Global Active Adversary.
I haven't seen them abusing this power except for some incompetence (i.e. injecting JS into pages that customers didn't sign up for) but maybe they're just really good at hiding it.
Your mobile keyboard records everything and reports back to the mothership...
Source?
The problem is republican lawmakers don't like writing laws interfering with businesses + democrat lawmakers benefit from Apple's politics.