Which appears to be true. If these companies respected the privacy of their users, their privacy policies would not contain what they do.

Regardless of current active data collection, I think it’s wise to read these policies as a declaration of intent.