Local and cloud AI have different trade-offs. A “privacy-first” label is not enough to explain which information leaves a device or which provider processes it.
Map the information flow
List the inputs, processing services, stored outputs, and people who can access them. A local interface may still call a remote model. Explain that distinction in product information and the privacy notice.
Minimize the information sent
Send only what the task requires and avoid putting secrets into prompts or logs. Consider whether redaction, shorter retention, or a deterministic tool can reduce exposure. Controls need to be implemented and tested rather than expressed only as promises.
Define a recovery path
Make it possible to correct an answer, revoke access, and handle a provider outage. An assistant should make its scope understandable and avoid pretending to have completed an action that failed.