I'd just keep track of the usernames who say that, wait until they reveal their identity elsewhere on HN via a "Show HN" or something, then ask them publicly to explain what their stance is on protecting their users' data. When they give the famous cookie-cutter response of, "Obviously we care." then you can hit them with, "but did you not say 'meh' when this same issue came up a few months ago?"