I agree with most of your comment, but just a quick note that whether or not a service provides a privacy policy doesn't mean they necessarily do anything to protect users' privacy. (Mostly in the sense that if they did have one, that fact wouldn't mean much on its own.)