Building an AI Assistant is a very hard problem, in and of itself. Making your service decentralized seems like it will add a lot of complexity and present some limitations. Why can't you just follow good security practices? As evidenced by Google, most people are willing to let a company know a lot about them in order to use a valuable service.