I'd argue that other questions around how the data is:

- handled

- available for access by employees

- retained, deleted, and stored

etc.. are at least as important for your privacy.

As someone who works in security, I am as concerned or more about the seemingly inevitable breach's impact on my privacy.