For the GDPR to have impact here, wouldn't they have to be collecting the information in the first place? If they're doing all the work on your own computer, that wouldn't trigger any GDPR issues.
Data collection is still data collection, it doesn't matter whether I am the one processing that data or a third party :)
Data collection is still data collection, it doesn't matter whether I am the one processing that data or a third party :)