Client-side data collection is opt-in and open-source: https://www.zdnet.com/article/canonicals-ubuntu-telemetry/ If you're talking server-side collection we don't know about, I'd call for burden of proof since neither Ubuntu nor Debian have relevant history of collection and that would probably violate the Privacy Policy.