It's actually in google's interest to maintain their user's (relative) privacy. If they ever suffer a significant privacy breach, think of how quickly their (non search related) services will be abandoned.

If you're google, what would you do?

hint: non personally identifiable information models