Of course. There's nothing quite as protective as giving those decisions to third parties who want to end them.
Whenever any organization tells me they have a “privacy policy”, I automatically assume that means they want you to sign away your privacy.