[mgiampapa]

Certificate pinning and validation in apps for one. Onavo's VPN was really clear it collected market research data. It was as informed consent as a click-through could be.

[forgotusername6]

Interception of encrypted communications is beyond the expectation of what most people would consider "collecting market research data"

[hiatus]

I would expect the exact nature of the collection to be spelled out in some TOS that users probably clicked through.