That's another vector, and everyone considers separately. But at least here one can - hypothetically - have a BAA and zero-retention agreement with Anthropic. Which means they have moderately strong incentives to wipe your data after a fairly short while. CLIA, if I don't misremember, mandates a few years at minimum.