They're saying that they will keep the information private, but I'm wondering about whether GPT will uphold this standard as well.

If I were a provider, I'd probably want to see their BSA with OpenAI.