Digital rights advocates say users may be assuming levels of privacy that aren't guaranteed.