As would their help center: https://support.getpostman.com/hc/en-us/articles/203815791-W...
Not saying that negates what you are saying, but some proof would be useful, as it is a pretty serious claim.
Thank you for writing in. Sure - If you do not create an account or use Postman without signing in then we will not collect any of the data. We will only store the actual requests that are sent when the user signs into the application. That said - the data is encrypted in rest and in transit using industry best standard encryption algorithms. Hope this clarifies!
https://www.postman.com/licenses/privacy/
Under "Information you provide to us": Content you provide through our products: The Services include the Postman products you use, where we collect and store content that you post, send, receive and share. This content includes any information about you that you may choose to include: we collect feedback you provide directly to us through the product and we collect clickstream data about how you interact with and use features in the Services.
> We will only store the actual requests that are sent when the user signs into the application.
It seems obvious to me that they are talking about your request that results from you logging into your postman account, that's why they say:
> If you do not create an account or use Postman without signing in then we will not collect any of the data
They are NOT saying "we record every REST request you generate from postman and send it to our servers".
https://learning.postman.com/docs/postman/launching-postman/...
So what actually is going on then, is that postman has a feature that you don't have to use, that you know about, that you know requires it stores request / response data, and it is doing just that.
https://support.getpostman.com/hc/en-us/articles/203815791-W...
"Postman does not track any content of your requests/responses."
That post was 2 years ago, so it's probably outdated.