These apps were recently found to be collectind a huge amount of personal browsing data from the device, regardless of whether private browser mode was used or permission settings.

https://localmess.github.io/

This technique was discovered, makes me wonder how many undiscovered techniques are still in use.