The apps cannot track if they have no permission to access the respective APIs that give them data they are tracking. What are they going to send via the network? Only things that the users specifically give to the app.
Each app can track user behavior within the app itself, and can send this data to an aggregator who pays for it.
That way you are tracked across all participating apps.
This was common practice until Apple banned it.