It's impossible for a capital-owned company to credibly make such assurances. All it takes is one billionaire and they can buy the company, change the policy and do whatever they want with the data. No private company can promise data-security, they are not in a position to provide it.

I agree, the only way to keep data safe is to never collect it and certainly never put it on the private servers of a capital owned corporation.