Ok and if you don’t trust anyone, you don’t have any protection at all.
Correct. I assume I don't, so I'm always super-careful not to give away any information I don't need to give to begin with. Or I give fake information whenever possible, to pollute the well. For the rest, as the old saying goes, if it's on the internet, it's as good as public.
They are never American.
Agreed. If you have to trust a company with your privacy in any way, don't use an American company. It's not even their fault: they operate in a country that's fundamentally dangerous for your privacy.