>Wouldn't you just put that in your privacy policy so when some bug makes it in

Well by that reasoning, all legal agreements should just say, "we are not responsible for anything, we take what we want don't, you can't sue us".