Pessimistically I might think that the client demands data privacy and ownership on paper, but also doesn't want the liability of actually owning and maintaining or even touching their own vast stores directly. While the firm would love to learn from the data to better their systems... and more. So there's just a nice wink and a nod about what's not happening. But that is an uncharitable conspiratorial lens. I'm sure it's fine.