Can and do are two vastly different things. The assumption that data privacy can only be accomplished by no one having any access to data is ridiculous. Of all the companies that exist right now, apple does a fair bit of work regarding data anonymization and access restriction.