They released the source code for their server infrastructure where the data they collect is sent so we can verify that? Oh let me check... nope. If only they didnt collect the data there would be no trust issues.
There's no evidence they're doing anything with any data and there never was. All of this outrage is purely centered on a ToS update which they've since refactored in response.