Although the data does not immediately identify you, it can theoretically be used to recognize someone through roundabouts, such as the apps they have installed or traveling with the same person.
The concern is not just what the Apps exceed data, but they may conflict with the EU GDPR privacy rules by collecting information without consent and potentially identifying users. You can't blame it solely for the foot of Facebook or developers, though. Facebook's relevant developer package did not give the opportunity to request permission until after the GDPR came into force. The social network developed a solution, but it is not clear that it works or that developers implement it properly. Many apps still used older versions of the developer package, according to the study. Skyscanner noted that it was "not aware" that it was sending data without permission.
Facebook was sympathetic to Privacy International's concerns in an answer and said it was crucial for people both to know when an app sends data and "has control" over whether that data is associated with them. Future changes like Clear History will also help, Facebook said. The company also emphasized the Financial Times that developers could turn off automatic data collection and could delay sending app analyzes. Nevertheless, it is clear that app creators also do not notice these changes or plagues to adopt them ̵