A privacy policy would only take the bare minimum of interest and attention. 20 minutes with a free policy generator and a simple link on the site is all it takes. A lack of a policy might not be the best "evidence," nor is a policy assurance they will respect your privacy, but it is a start.