How can you trust a product promising privacy when it runs on a closed-source platform (that is further also known to collect data on the user and to be prone t

How can you trust a product promising privacy when it runs on a closed-source platform (that is further also known to collect data on the user and to be prone to government surveillance)? Real privacy is only possible on platforms that are 100% open-source.