It cannot verify internal handling
A website’s public statements do not independently establish who can access files, how backups work, or whether a particular deletion request has completed.
Workaround
Read the current privacy and retention terms, and ask the provider for clarification before uploading sensitive material.