If I want private i run the LLM on my machine.
Everything else should be considered public basically
Even assuming a perfectly benevolent company, that means nothing. Just them having the data is a liability. Which is why Rule Number 1 of data security is: have the least data.