Secondly, intent matters. Killing a person can be a pure accident, can be manslaughter, can be first degree premeditated murder. You might attempt to dumb it down to "It doesn't matter, the person is dead" -- but that isn't how the US legal system, or the majority of people think.

If the intent of a system is to allow the profiles to be read by people (or shipped to government) that is very different than if the intent it to be exclusively used by software.

The interesting distinction (for me, and I have been a happy GMail "customer" for close to a decade soon) isn't the profile, it's the human. I have strong faith that Google can be successful in keeping humans from reading my e-mail (or a computer-generated digest of it, which is what the profile amounts to), and so I don't worry about the existence of the profile.

Trusting that those providers don't start siphoning off a copy of your mail (or are indeed diskless and not out of malice or incompetence actually just using regular disks. Also, being diskless is worthless if they are still keeping your mail around in memory anyway) is no different than trusting Google to keep humans away from my email.