A “commitment to privacy” is not worth the bits it is sent on.
If a company wants to show a real commitment to privacy they can put large, compulsory, multiple thousand dollar damages per potentially damaged party for failure to adhere to their stated privacy commitments in their terms of service or other contracts. This is absolutely bog standard and trivial to add. If they do not intend to violate their commitment to privacy, then such a clause incurs no risk to themselves.
Absent that, any claim of privacy should be viewed as outright nonsense since there is no incentive for them to even try to actually follow through or make any efforts to avoid making mistakes to your detriment.
If a company wants to show a real commitment to privacy they can put large, compulsory, multiple thousand dollar damages per potentially damaged party for failure to adhere to their stated privacy commitments in their terms of service or other contracts. This is absolutely bog standard and trivial to add. If they do not intend to violate their commitment to privacy, then such a clause incurs no risk to themselves.
Absent that, any claim of privacy should be viewed as outright nonsense since there is no incentive for them to even try to actually follow through or make any efforts to avoid making mistakes to your detriment.