add note about data privacy to README