TikTok is no different to any social media apps out there when it comes to tracking and telemetry. However, the protection mechanisms in their API is interesting if true.
Perhaps they got Arxan Technologies to do the heavy-lifting for them to audit and obfuscate their private API just like how Snapchat and Niantic (Pokemon Go) did.
This ultimately sounds like typical white-box cryptography again.