You and Your Applications may not collect user or device data without prior user consent, and then only to provide a service or function that is directly relevant to the use of the Application, or to serve advertising.
FORBES: Congress Has More Questions over Apple iPhone Privacy