That might be a presumption in your head, based on the mechanisms you presume are in place, but that meaning is not actually contained in the words of that sent

That might be a presumption in your head, based on the mechanisms you presume are in place, but that meaning is not actually contained in the words of that sentence. The word "collect" alone is ambiguous as to whether it is direct or indirect. And if you read other privacy policies, outside of the tech industry, it is normal to use the word 'collect' for information gathered from various sources. (e.g. insurance privacy policies)