What's known (and can be independently verified and reproduced) are search queries, crash reports, hardware specs and new executables. Mostly, if appropriate settings are not disabled. And performance metrics, but their sensitivity is mild at best. Don't get me wrong - it's not any small deal and it is already quite sensitive, but this is nowhere near "all secrets". There are a lot of outcries about serious spying - on the order of webcam shots, audio streams or even hard drive scans on typing in movie names, yet I haven't seen any details and highly suspect those are rumors and speculations at best.
Is there anything like those rumors - a private data leaks that can't be justified (i.e. not usual "search improvements" or "malware protection" stuff), but that can be verified and reproduced? I bet, many would love to hear about some, check the facts and went to police and/or court with those.
We do have state-of-art decompilers, protocol analyzers and IDS software. Yet I'm somewhat bothered by the gap between the rumored privacy implications and analysis published.