“They're saying 'yes, we implement differential privacy, trust us, but we’re not going to tell you at what level we do it,'” Korolova says. “By virtue of not revealing what their parameters are, they're kind of breaking any real commitment.”