This is what local models are for! On your own hardware, whose filesystem you can erase, shred, or physically destroy later.