Applications are not juridical entities, so at the absolute best it is debatable. Most probable version is that they share as much data as their internal regul

Applications are not juridical entities, so at the absolute best it is debatable. Most probable version is that they share as much data as their internal regulations say, or a bit more. They definitely have some form of internal regs on this, for basic security hygiene, but they write it.