From what I understand (haven't set up an iPhone from default in a long time) but the 'limit ad tracking' is off by default, allowing apps to have background app refresh privileges is allowed for any app by default (you must manually disable for any offenders unless you want it off for everything), the privacy features in Safari are off by default, and Apple's own data-collection and location-collection is also on by default.