Why don't you go prove it by checking our code and runtime network behavior? We pay bug bounties through hackerone.com/brave.

Talk is cheap, especially stories that don't pass any kind of smell test: we would not take our life into our hands by collecting any user data, when it's easy to discover that for real hackers.

https://brave.com/data covers our data policies for baseline and optional stuff.