An external audit would be one way to show that the company takes the privacy of its users seriously. But "they're not going to do that," says Alex Shepard, staff writer at The New Republic.