While this certainly may be true, I trust companies to tell the actual truth about this when it's been verified by an independent 3rd party.
So much of the "This can't happen", "We didn't scan and save all your wireless network names", "We didn't copy all the contacts in your address book" quite commonly break down later when it is realized that some sub-group doing an A/B test or keeping their work somewhat hidden actually did the thing in question.