Yes, but with all due respect, this misses the point: If my concern is privacy, consider the business incentives to each party for divulging info about me to a government agency or marketer. The cloud services you describe receive revenue from thousands of different companies with various business needs and concerns. Little ol' me won't be a blip on the radar revenue-wise, even if it's a big news story in the internet privacy world. For the VPN on the other hand, a sizable - maybe the lion's share - of their customer base has the same priority as me. If it gets out in public that the VPN caved either to pressures of the state or corporate greed on my data, they'd just as easily do so to anyone else, and customers would flee en masse.