They're still a public company, and Im sure the heat is on their C suite cause they haven't had any successful hardware releases since the M series processor was first released.
Not selling "anonymous" data would look to shareholders as thrown away profit, which they're even able to sue for.
So I'd be insanely surprised if they weren't surveiling their users - but unlike google and all, they own their entire closed-source software and hardware empire, so the likelihood of catching them is also valuably low.