It's not a matter of trust in institutions, but a matter of ability to know, not the company but you, that your data are mishandled. How can I know that an Alph

It's not a matter of trust in institutions, but a matter of ability to know, not the company but you, that your data are mishandled. How can I know that an Alphabet sysadmin do not use my mails? I can only know because Alphabet state it respect the laws. I have NO PROOF that's true, nor I can't have one. Since I can't prove unlawful handling of "my" data, I can't complaint because I can't even prove such unlawful use exists. Sometimes, here and there we read some scandals about "this coming out of an LLM", "this coming out from a leak" etc, but there is no real proof. One of my past banks at a certain point in time have chosen to suppress the RSA OTP for a mobile crapplication that do soft-token and many more, I've sent a classic GDPR Nightmare Letter to them with many detailed complaint, they answer politely: - we need speaker permissions because you can call customer service from the app, so you can see and act on the screen while talking - we need camera permissions because there are many QR-based payments systems we support - we need precise location and location history because with them we can try to prevent potential misuse of the app - we demand contacts reading and writing to allow you easy transfers, quickly call the right number if you lost your card, .... Essentially 100% is formally justified BUT the app does not run on an emulator or on rooted phones, there is no source code and formally reverse engineer it is forbidden. So essentially I can't prove they access some sensors and data ONLY for the purpose they declare or not. If I can't prove illicit use I can't use my country laws about my privacy.