The law actually has a specific provision preventing both os providers and developers from sending your information to whoever they want.
And the OS is only allowed to send the minimum information that is required. Ie. your age bracket.
Send only the minimum amount of information necessary to comply with this title and shall not share the digital signal information with a third party for a purpose not required by this title.