"It collects or transmits private information without the user’s knowledge"