The article suggests Ghostery sends data anyway.

Also, the non-denial denial in the next FAQ item (https://www.ghostery.com/en/faq#q6-general) sets off all kinds of alarm bells.

Huh? How is that a non-denial denial? The question is "How do I know that's all you collect?" and the answer is "You can verify it yourself by examining the source code."