That might be possible, I'd be really curious how. For something like data on what apps a user has installed, what hardware they're on, etc those data really would be first-party analytics.

Some things can be collected through third party sources, though that depends on those third party tools being used, not being blocked by a user, and on API access for those third party tools to collect the necessary data. I would hope such regulations wouldn't depend on regulating specific API design, but that could be necessary.