I think right now it only scans pictures destined to be sent to iCloud. The problem is you won't hear from them once they start scanning everything. Besides, it's just not really provable, right? You still have to take their word for it.