You bring up a good point. Software shouldn't start sending information until the user is explicitly informed just as users are required to explicitly consent to an EULA.

Otherwise it's the software that's using the user and not the other way around.