They do say they harvest data from you, and like google they say they don't sell it, but they instead sell companies the right to advertise and then apple/google will use their data to target it at you.
You can make up your own mind if that is an overstep or not. For me it is.