It's not quite spying when you willingly hand over this information and agree to terms of service. You're data is not considered yours alone.

It still shocks me the number of people I know who freely let agents on devices that contain unencrypted private keys, freely dump internal data into cloud models and generally don't give a second thought about any of it being trained on, inevitably leaked one day in a db breach or read by providers. I find it's best to consider any data put into a cloud model the same as if it were posted publicly online, since that is the very possible eventual end result.

Hopefully more of these stories push people towards local models :)