"Utterly private" is a very odd term here.

At the very least, Apple knows which sites you're signing into, and has the unique e-mail addresses used at those sites, and has likely issued the authentication tokens for those sites. I'm not sure what's "utterly private" about this setup.