Do you check whether you access domains you don't want and then block them?
For example, the android app of n26 has quite a lot of trackers like:
Similarly, ynab has:
I didn't expect a bank app and especially a personal finance app to track me so much.
They are now in my nextdns denylist along with the nogoogle privacy filter of nextdns until I get rid of these apps.