if they are making a good faith effort to give all the real privacy you can expect, I don't think they have a particular duty to water down their marketing messages by going into distracting detail that criminals shouldn't have the same expectations. They did disclose within their terms that they don't by default keep logs, and they do need to comply with court orders.