Unless it is opt-in it is spyware.

You can't trust devs that have such bad judgement that they would even think about doing it opt-out with the opt-in data either.