I think what's really remarkable about this is that Apple issued a statement seemingly less than 24 hours after it became an issue. In the past, Apple has tended to wait a week or so before issuing statements, resulting in a lot of criticism and the issues sometimes steamrolling simply due to the fact that the charges aren't answered.
I'm not at all surprised that Apple isn't violating users privacy.
Apple's delays in PR announcements normally seem like they're the result of not wanting to say anything until they have something substantive to say. They're really not big on "we know it's a problem, hang tight..." announcements.
In this case they're coincidentally a bit ahead of the ball, so there's no need to wait and formulate a plan.
I'm pretty sure Apple's "wait a week" clock began ticking when the initial flurry of reports about CarrierIQ on Android started circulating, not yesterday...
Where 'wait a week' probably is: some high level manager or vp asks people to investigate this to get all the details before putting out any statements.
I'm not at all surprised that Apple isn't violating users privacy.