When Facebook says it protects our privacy