Putting aside whether this is ok for a second: This should not be a surprise to anyone. Of course they are doing this. I would almost argue that it would be foo

Putting aside whether this is ok for a second: This should not be a surprise to anyone. Of course they are doing this. I would almost argue that it would be foolish of them not to collect this data. The lifetime expected value of the data is so much higher than the marginal cost of transferring and storing it. I can't think how many times on the product side of services I've run that we've been grateful to have this kind of data. Sometimes it's for obvious reasons that we always knew, but often it's for suddenly crucial reasons that we never could have anticipated when we first started collecting the data. Again, that doesn't mean it's OK and I strongly support GDPR-style data privacy legislation in the US. But in the meantime I guarantee you that just about every service you use is gathering data like this and a whole bunch more.