Disclosure: I donated a little and later met the founder of the nonprofit.
I see language like:
"We do not sell your personal information in a way that most people would think of as a sale. However, we do participate in online targeted advertising and use analytics which allows tech companies, in exchange for our use of their services, to use user information collected from our App to improve their own products and to improve the services they provide to others."
and wonder what in the world that actually means?
Are they gathering data like 30% of our users are iPhone 12+ users?
Or something else?
But perhaps more interesting is the ability to determine that User X is trying to clear their data for Wayfair, Amazon, and Home Depot, but not Target and not Lowe's. I could imagine some interesting analysis with that data, even if only in aggregate.
There's also no prohibition that I can see in the Privacy Policy against things like fingerprinting your device, building a shadow profile on you, and exposing that data via some API with an "anonymized" identifier. I suspect that the ability to determine something like "owner of mobile device 123455321 is privacy-conscious" might in and of itself be a useful feature for targeting ads.
> Data that advertising networks and social media companies already have about you, so they can identify you on their platform, such as your email address or user ID
I think this falls under the 'usual e-stalking techniques' that GP mentions. Very surprised to see CU doing this.