Apple's claim (per public statements) is:
- They upload your data to their servers. This is a requirement of iCloud and several non-iCloud systems like Maps.
- Where analytics is concerned, data is anonymized. They give examples of how they do this like by adding noise to the start and end of map routes.
- Where training is concerned, data is limited to purchased data (photos) and opted-in parties (health research).
My point is that Apple's code executing on device can be verified to execute on device. That concept does not require trust. Where servers are involved and Apple does admit their use in some cases, you trust them (as much as you trust Google) their statements are both perfectly true and ageless. Apple transitions seamlessly between two true concepts with wildly different implications.