Privacy advocates aren’t buying it.