Is this even legal? Should any personal information be opt in by default? Should Apple present you with the details of what they send and why and an option to o

Is this even legal? Should any personal information be opt in by default? Should Apple present you with the details of what they send and why and an option to opt in to each separately if you want to? Does Apple inform the user where they can download their data that has been collected and who had access to it? Does Apple use a loophole in GDPR that it only applies to websites?