It goes to my point about privacy not just by design, but by default. When I installed the TikTok app on my phone just the other day, I did not even create an account and it already started tracking and sent 102 requests for information like my battery life, my device ID and such. I don't even have an account, so why do they need that information?
One way to address it is to go for platforms and marketplaces that host these types of applications, because they are the ones that approve these types of applications.
Going back to your point about long terms of service, it is a problem. One initiative that I really like is called Terms of Service; Didn't Read. It's a community-driven initiative that has been around for 10 years. They rate different terms of service for each provider, including social media platforms. They rated an E for all major social media platforms, not just TikTok. This is the lowest grade. A is the highest and E is the lowest—