My company is weary of this too. They don't want user PII to leak in any way to the training models such that outsiders might be able to get it.