Seems like you're suggesting that, to establish YOUR trust, either the website does not use any third-party vendors or services (in the delivery of the experience to you), or they use third-party vendors/services but do not send them any data ...? If so, in this age of open web services and distributed systems/infrastructure, are either of these scenarios reasonable to expect?