Precisely, yes. As with all internet services we can't really audit what's being collected as simple users, we have to trust them to "do no evil". If tomorrow ddg started logging my browsing history in order to better target ads for instance I probably wouldn't notice a thing.