Its a law that's hard to enforce. How'd you verify that a company isn't tracking you without auditing their whole codebase and infrastructure at multiple points

Its a law that's hard to enforce. How'd you verify that a company isn't tracking you without auditing their whole codebase and infrastructure at multiple points in time?