While TikTok said the code’s only used for debugging, researchers also found Meta products Facebook and Instagram can track users’ in-app browser.