I agree. The phrase "we take your privacy and security seriously" is an inherent oxymoron; meaning the opposite of what it says. I really like, and have copied

I agree. The phrase "we take your privacy and security seriously" is an inherent oxymoron; meaning the opposite of what it says. I really like, and have copied, Tesla's note to security researchers. https://www.tesla.com/about/security https://www.tesla.com/about/security I had to clean up one breach a few years ago. It was, gulp, a breach of HIPAA-covered health info. We wrote to our customers saying "We're sorry. We unintentionally sent your blahblah sheet to the wrong hospital. We have spoken to the person at that hospital who received it and confirmed that they erased your information. Again, we apologize. If you have questions don't hesitate to call us at xxx-xxx-xxxx" We could have blamed the the third-party vendor who actually made the mistake. We could have spewed oxymorons. But this message was successful and true: nobody sued us and the govt didn't write us up. The breach, admittedly, was only a few dozen records. It could have been much worse. A lesson for tech people: when you have a breach DRAFT THE PUBLIC STATEMENT RIGHT AWAY so you can hand it to your executives and crisis PR people. That way your company has a chance of doing it right.