It’s spyware when the user is unaware of it and their usage data is used without their consent.

If the parties consent to it, it’s fine. When it’s hidden and nonconsensual is where the problem arises.