There are no promises in the words, “We care about user privacy.”
This is no accident. It is a strategy.
In the US, companies that break their own privacy policies can—and do—face lawsuits over misleading and deceiving their users, including making false statements about data privacy. But users are handicapped in this legal fight, as successful lawsuits and filings are rare.