I agree with you 100%, and have no idea why your comment is not at the top.

This is a non-apology apology. It's a "you caught us, and we don't want our company to die" apology.

If they actually cared about your privacy, they wouldn't have stored all your personal data on their servers without your permission to begin with.