I don't find his arguments convincing at all. The appearance of supporting privacy is not mutually exclusive with invasive behaviour internally, and records - even if supposedly kept private - is still potentially vulnerable to being hacked/leaked. The problem is they collect data to sell as this is literally their business, while true privacy is only achieved when personal data is not collected.