[kbenson]

Of course, the available information is what's presented. But what I outlined isn't any less effective because the specific actions are unknown. You have to assume if they say they can/may do something with regard to your data, it's being done (or can/will be done in the future). Privacy policy violations are actionable, so what they say they are allowed to do is what should be started with. If there's specific credible information that they do otherwise, them you use that.

The whole point is making it easy to judge how companies interact with their customers in regard to data and privacy so market pressure can do it's thing.