For me the fact that they’re open source. This thread is a prime example of why it’s so important. We really have no idea what DuckDuckGo is doing because they’re closed source. For all we know they could be forwarding users’ IP to Microsoft/Yandex/etc.

If you want to market yourself as a champion of privacy, then the absolute minimum criteria should in my opinion be that your codebase is open source.