At this point of time, the only way to ensure privacy is to have it embedded as a legal contract. Otherwise, all claims of "never use" or "will not be shared" means nothing.