rough english summary: the vero privacy policy explicitly permits passing your data with 3rd parties. Also: analysis of what data the app transmits to other sites is shown and somewhat revealing
To be fair, isn't that required though to operate a website? If you want to use a CDN, you will need to 'pass user data' to a 3rd party. You'll need to state that down in your terms and conditions.
The worst they can be accused of is not being explicit enough about what 3rd parties and why they need to do that.