Privacy-first generally entails designing the service on a technical level to be unable to leak personal data. A promise not to store your data is not sufficient.