Yes. This is also happening with OAuth integrations also for several platforms.
You also need to have a privacy policy and ToS anyway when you are providing a service like a wallet or content hosting.
“We may revoke your access/delete your content/etc at any time” is just a protective measure because no ToS is perfect