It is important to understand that the personal data you give to a company becomes their "property". Even if a company that currently runs a service keeps the data private, it can be put up for sale. The new owners are then free to operate differently, especially when there is no GDPR like in the US.