#fastlane collects tracking data and sends it to their server, it is also opt-out so it is enabled by default https://docs.fastlane.tools/#metrics
they hashed the Application ID so it must be private! ;-) except the Application ID space is small enough to just generate all possible Application ID, then have a lookup table.