That's the truth. It's good to keep an eye on what they'll admit to if nothing else. It'll likely take a whistleblower for people to know what a company actually does with their data, although if we're lucky we might learn something by chance from evidence presented in an unrelated lawsuit. What we really need are meaningful regulations.