If it's a critical product/relationship, the biggest thing that I look for is an intelligent statement around third party access to my data/use of the applicati

If it's a critical product/relationship, the biggest thing that I look for is an intelligent statement around third party access to my data/use of the application. There are three possible outcomes: 1.) The privacy policy does not mention third party access. This is bad because frankly, so many third parties (ie - Google Analytics) provide an incredibly useful service. If third party access is omitted, it means they either have no plans of getting the benefits of a third party (which I think means they're less likely to stay in business), or they haven't even thought through the privacy implications of using a third party (which again means I think they're less likely to stay in business). 2.) A vague statement about third parties. My favourite example is "from time to time, this Service may contract to send application data to a third party in order to improve the Service. When we do use a third party, your data will be kept in accordance with their privacy policies." From a corporate point of view, writing a statement like this makes a lot of sense, but from a user point of view, I like to see evidence that the company thinks about third parties at the policy level, not just the operational. 3.) A more concrete statement about third parties. An example would be "This application is hosted on {{vps provider}} and because of how it is architected, it means that {{service provider}} will get access to data about your usage. Their collection and use of your personal information is governed by their privacy policy located at {{url}}." #3 is asking for a lot and when I've worn the founder's hat, I've often hesitated to put this much detail in. It makes even less sense when I've been in a situation where it makes sense to run every change by a lawyer. But, as a user, particularly if I fell into the referenced "must be decentralized" crowd, I'd feel most comfortable with a detailed privacy policy like this.