The article is really vague. Extraordinary claims should come with extraordinary evidence. That said, could it be that the ad has its own JavaScript that does its spying for the time it is visible on the page? Can adds do that?
Even if worse came to worst and there was a bug on the parent page that let the ad JS access its parent page context, it should still be sandboxed to just that page.