BlueSky's app shouldn't be collecting data though, if they really are decentralised. Mastodon's app doesn't collect anything at all.
(Also, as BlueSky is a for-profit corporation backed by VC money, guessing we will see ever more bullet points pop up on BS's surveillance list in the future.)
The email goes to your server, not to the app. The signing in process on the official and third party Mastodon apps happens through your server's website (that's why it looks like a browser when you do that part of the signing in, it is using your phone's web browser for that part).
"you give it images and videos etc (user content). "
That isn't going to the app, that's going to your server. The data from those isn't passed on to the app.
The point I'm making is this data doesn't need to be collected by the app, yet BlueSky is doing this according to their app store privacy list.
BlueSky is behaving like a centralised service while advertising itself as decentralised.
@FediTips @ipg did you know the bluesky app is open source [github.com]. if they really are doing anything nefarious with the login data they let you input you could just see exactly what they are doing with it instead of making shit up to satiate some stupid tribalistic mindset preventing you from accepting that different standards may coexist