The same security you demand would only come from such a practice. So of course they don't have to store it but would you be happy if it was buggy and unsecure?You are missing the point. They don't have to store it, they choose to for diagnostics (according to you).