> It'd be corporate suicide for them to be caught violating zero-data-retention commitments

Would it, though? Considering their entire business model is built on the agglomeration of data that isnt theirs.