Not in reality. Nothing prevents a bad player from misusing user data once an audit is done. External audit would only be a good cover.