They need to ask if they collect personal data as per GDPR or the US Data Privacy laws. If the data collected is not of private nature they don't need to ask.

Usage patterns can be granular enough to identify a user online, its easy enough to do that with machine learning nowadays. They have to ask anyway.

It doesn't send that granular enough of a usage pattern though, they have a group of people making sure that they data they collect cannot be used to identify someone.