Yes, in my experience on either side of those "policies" they really do mean nothing. You just have to assume that all the data you share is no longer yours an

Yes, in my experience on either side of those "policies" they really do mean nothing. You just have to assume that all the data you share is no longer yours and will be used however the company sees fit. I am amazed by the number of people who assume that "that would be bad PR if they got caught" is good enough security to protect data they consider sensitive. Especially when the PR damage historically has been very low, especially if you are a sexy and loved company like facebook or google.