Fair enough! We take data security and privacy very seriously and have built many safeguards to prevent even us from accessing the raw data in the cloud. At some point in the future we hope to launch local inference models too!
If you were actually serious about prioritizing privacy above securing an ongoing service relationship you would ship local inference as the default and only (possibly later) offer a cloud service as an optional add-on for those who want/need it.