Sorry, @gazumped, I realize I was not clear. There are a couple of things missing here which would enable you to more clearly see where I am at.
Since I use Linux only, and Evernote has no dedicated Linux client, and the open source one is not up to par, I have to use the "web app". Which means analytics. For me, Evernote's appeal also had a lot to do with the Web Clipper, so again -- nothing in Evernote's privacy policy prevents them from integrating third-party analytics communication in the add-on (didn't investigate this, though).
My notes are rarely of a sensitive nature (as my talk about encryption may have led you to believe). They are mostly about late ancient and medieval ethics and anthropology. Really really important stuff, of course, and I would actually want as many as possible to be in on it -- but thinking human beings, that is.
So let's instead say that this is a matter of principle.
The basic principle is this: If I pay for a service from a service provider who boasts privacy, I am assuming that the service provider will not delegate this service, or parts of this service, to a third party whose business model is based on mining my data for profit -- and I assume any data produced in the course of my using the service stays with me and the provider.
Like you say, outside "replay sessions", analytics mostly records dates and url's connected to user. But these are not very helpful to Evernote themselves, so I am assuming they want more fine-grained data. Which explains their cooperating with service providers which can provide such more fine-grained data:
Quote from Oliver_ENf2013's post:
"Recently a study from Princeton analysed what is called session replay. Oversimplified, it is a third party company acting as man in the middle between your PC and the website you are visiting, which then tracks and stores every mouseclick and keystroke to help the site owner analyse their website.
In order to do this, everything you type is not only stored at the website (like for example Evernote), but also on the servers of the analytics company."
Evernote uses or used Malta-based hotjar, which records sessions. Which means potentially every key-press and mouse-movement is stored. Per their own statement on their website, hotjar honors the "Do not track" setting in browsers (which, famously, Google ignores and has always ignored). This is good news, of course, assuming hotjar is a honest and trustworthy outfit. Er, anyone know these people? ...
At Google Keep I am knowingly paying for the service with my data.
I thought Evernote provided an alternative in this regard. It seems I was wrong.