They actually have incredibly strict policies about user privacy. Everyone in the company recently had to watch a short movie (with actual actors and realistic scenarios) about appropriate data usage and permissions.