The company says personal messages will remain private, but critics warn the data used for ad targeting could still put user privacy at risk.