It silently and without even first-run notification transmits your usage data without consent, pretty much the textbook definition of spyware. Netlify considers your agreement to their TOS (at account creation time) to be your opt-in to them silently spying from within your tools.
Until I complained, it even transmitted a telemetry event on the user’s explicit opt-out of telemetry.
More info: https://github.com/netlify/cli/issues/739