with open weight models, you have three other options

A) use a provider that pinky-swears not to store your data. they obviously don't give a fuck about 'distillation attacks', so they have little motivation to voluntarily monitor and store your queries. reasonably high likelihood of privacy.

B) rent the hardware and run the model yourself. very high likelihood of privacy.

C) buy the hardware and run the model yourself. absolute certainty of privacy.