It tells you exactly what it does with your information if you ask it, including this exact scenario, and has for at least four months now (when I asked).
I don't think someone is an idiot for thinking that the information they type into their private Claude account is private. I also don't think people are idiots for thinking their phone is listening to them and giving them targeted advertising based on that. Both are reasonable deductions from their lived experiences. Both are wrong.