They may be keeping that data private from advertisers, and maybe even themselves - I've read the specs, they do a good job and going through the motions - these systems are certainly, mostly *secure* - but the potential to access that data is still there.
It's that potential that is the privacy.