Kind of the way it is with every service, unless you take extra measures to protect yourself. E.g., PGP, careful selection of data you upload, or just not using any cloud services in the first place.
And: In my opinion, they just pretend! In my country, such a behavior could well be contested in court in my opinion, because we normally have strong rights protecting communications.