It's about jurisdiction. You can claim to be privacy friendly but if the laws in the country your services are being offered from can legally demand you break it...