Хотя я по-прежнему не понимаю, каким образом это соглашение разрешает им лазить по диску и загружать содержимое папок, не подсоединённых в onedrive, на сервер. "Лазить по диску" -- это из серии "How we do we collect personal data" and "What personal data we collect". Я сомневаюсь, что то, что там написано, разрешает им это делать.
Вы посмотрите на это с другого берега: соглашение не запрещает им лазить по компьютеру пользователя, стало быть... Кстати, пункт
Content вроде бы явно разрешает:
MS: What personal data we collect писал(а):
The data we collect can include the following:
Name and contact data. Your first and last name, email address, postal address, phone number, and other similar contact data.
Credentials. Passwords, password hints, and similar security information used for authentication and account access.
Demographic data. Data about you such as your age, gender, country, and preferred language.
Payment data. Data to process payments, such as your payment instrument number (such as a credit card number) and the security code associated with your payment instrument.
Subscription and licensing data. Information about your subscriptions, licenses, and other entitlements.
Interactions. Data about your use of Microsoft products. In some cases, such as search queries, this is data you provide in order to make use of the products. In other cases, such as error reports, this is data we generate.
....
Interests and favorites. Data about your interests and favorites, such as the sports teams you follow, the programming languages you prefer, the stocks you track, or cities you add to track things like weather or traffic. In addition to those you explicitly provide, your interests and favorites can also be inferred or derived from other data we collect.
Content consumption data. Information about media content (e.g., TV, video, music, audio, text books, apps and games) you access through our products.
Searches and commands. Search queries and commands when you use Microsoft products with search or related productivity functionality.
Voice data. Your voice data, such as the search queries or commands you speak, which may include background sounds.
Text, inking, and typing data. Text, inking, and typing data and related information. For example, when we collect inking data, we collect information about the placement of your inking instrument on your device.
Images. Images and related information, such as picture metadata. For example, we collect the image you provide when you use a Bing image-enabled service.
Contacts and relationships. Data about your contacts and relationships if you use a product to share information with others, manage contacts, communicate with others, or improve your productivity.
Social data. Information about your relationships and interactions between you, other people, and organizations, such as types of engagement (e.g., likes, dislikes, events, etc.) related to people and organizations.
Location data. Data about your device’s location, which can be either precise or imprecise. For example, we collect location data using Global Navigation Satellite System (GNSS) (e.g., GPS) and data about nearby cell towers and wi-fi hotspots. Location can also be inferred from a device’s IP address or data in your account profile that indicates where it is located with less precision, such as at a city or postal code level.
Other input. Other inputs provided when you use our products. For example, data such as the buttons you press on an Xbox wireless controller using Xbox Live, skeletal tracking data when you use Kinect, and other sensor data, like the number of steps you take, when you use devices that have applicable sensors. And, if you use Spend, at your direction, we also collect financial transaction data from your credit card issuer to provide the service.
...
Content. Content of your files and communications you input, upload, receive, create, and control. For example, if you transmit a file using Skype to another Skype user, we need to collect the content of that file to display it to you and the other user. If you receive an email using Outlook.com, we need to collect the content of that email to deliver it to your inbox, display it to you, enable you to reply to it, and store it for you until you choose to delete it. Other content we collect when providing products to you include:
Communications, including audio, video, text (typed, inked, dictated, or otherwise), in a message, email, call, meeting request, or chat.
Photos, images, songs, movies, software, and other media or documents you store, retrieve, or otherwise process with our cloud.
Video or recordings. Recordings of events and activities at Microsoft buildings, retail spaces, and other locations. If you enter Microsoft Store locations or other facilities, or attend a Microsoft event that is recorded, we may process your image and voice data.
Но даже если допустить, что МС не шарится по диску, неужели перечисленного недостаточно?