This would affect far more than just ad companies, right? I understand that's probably a motivating factor, but wouldn't this incorporate an even larger subset of third party analytics companies (like Flurry / Pinch Media for example)? The purpose of those companies is not the same purpose as the app itself which rules them out. It could depend on the definition of "User Data" and "Device Data" in the agreement, I suppose.
Third party gaming tools would seem to be safe at least.