I'm sorry, but a publicly traded company's highest priority is to it's shareholder. To them money is the only priority.

To think otherwise is a bit naive.

User privacy is usually an afterthought, or a PR statement. Since you are the product being sold, your expectation of privacy should be somewhat lower.