You can still contemplate their incentives, their business model, and their reputation/track record. It's not as good as auditing the code (and making sure the

You can still contemplate their incentives, their business model, and their reputation/track record. It's not as good as auditing the code (and making sure the code you see is what actually runs), but it's a lot less effort, and depending on the extent to which you are ready to dedicate resources to improving your privacy, may be an acceptable tradeoff.