The article indicates that the provided API key is probably a proxy to the actual so the third party is also recording all prompts made using the proxy key.