I imagine they are not naive, they're counting on their clients being naive.

What's to say they didn't copy the data then shred a copy, or hell even just fabricate some shred logs.

Gotta hope that's just a PR attempt to try to save face. Though I wish companies would stop claiming it.