that does not, on its own, permit direct association
I think you have misunderstood. Well, more so conflated than misunderstood. Look at it this way.
Apple collects data about you. Data they classify as person and non-personal. Location data along with a ton of other data points, is classified as non-personal. Apple tells you they can do whatever they want with that data, including sharing it. On its own, one of those data points may not be able to permit direct association. Collectively, and with other data... say I provide a telephone number to go with that Apple data and LocationSmart adds that to data they've collected from other sources...
Apple's privacy policy covers Apple. It doesn't cover 3rd party Apple partners. A lot of us assumes it does. That same privacy policy tells us it doesn't, but we (collectively) don't read it and assume phrases like "We don't sell your data" and "You are not the product" mean something they don't.
Apple making a stink (just borrowing your phrase) about privacy related to Siri queries can't be conflated with Apple's policies regarding other parts of their operation. Apple hashing device ID's on Siri queries doesn't negate what their privacy policy says they can do with data.