Functionally, for me as a naive user, that's true of all software companies and online services I have dealings with.

...is that not what Google and Facebook say as well? How is their maintenance of privacy policed? Do they disclose what information they're gathering and using?

Sorry, I'm not necessarily looking for an interminable web forum or general link to the Concerned Netizens or whatever, here; I'm asking a naive question that I haven't taken the time to research myself.