Apps _and_ websites. jpost.com, the domain of the submission, is making calls to Twitter, Google, spot.im (???) and CloudFlare. I don't remember giving them permission to send my data there.
Bit ridiculous. I feel like browsers gonna have to get a lot better/locked down before we can actually enforce anyone to be responsible for sending data all over the place.