Privacy claims should be tested with controlled egress checks, not inferred from a settings screen.