Everything that happens internally has to be approved by privacy, it’s always part of every discussion (meaning it’s like you’d hope for). There’s no shortage of projects killed or altered because privacy said no.
But the marketing is nonetheless deceptive. Apple’s practices are much less stringent, and their cooperation with law enforcement much greater, than their marketing and even their privacy pages suggest.
This is a crappy place to turn around and tell your customers, “should’ve read the fine print!”