Part 2 was about where your data goes. This one is about who controls the deal after you've signed it — and the answer, over and over, is: not you.
When you build your practice on a cloud tool, you're not buying a product. You're renting access on terms the landlord can rewrite whenever it suits them. That's not a conspiracy theory; it's just the business model. And in the last eighteen months the landlords have been busy. Here's the receipt pile.
Amazon quietly deleted local processing. On March 28, 2025, Amazon removed the "Do Not Send Voice Recordings" option from the Echo devices that had it — the setting that kept your voice on the device. Users got roughly two weeks' notice, then their choice was: send recordings to the cloud, or lose Voice ID. The privacy feature you bought the device partly for just… stopped existing.
OpenAI can't delete your chats even when it says it will. A federal preservation order in the NYT litigation forced OpenAI to retain consumer ChatGPT logs — Free, Plus, Pro, and Team — from May 13 through September 26, 2025, overriding its own "deleted in 30 days" promise. As of this year it's still holding data from that window under legal lock, and a court ordered 20 million de-identified conversations produced. Your "delete" button is a suggestion, not a guarantee.
Anthropic flipped the retention default. On August 28, 2025, consumer Claude accounts moved to a setup where, if you allow training, your chats are retained for five years. The old default was 30 days. The switch happened to the product, not because of anything you did.
Meta turned your chats into ad-targeting fuel. Since December 16, 2025, Meta uses your AI conversations to target ads — with no opt-out (outside the EU, UK, and Korea). The thing you typed to a chatbot is now an input to what it sells you.
Microsoft raised the rent and blamed the AI. On July 1, 2026, Microsoft 365 Business Standard went from $12.50 to $14 a seat, citing Copilot. Google did the same when it bundled Gemini into Workspace. You didn't ask for the feature; you got the bill anyway.
And the features you do like can just vanish. OpenAI launched the Atlas browser in October 2025 and killed it in August 2026 — ten months. GPT-4o was removed in August 2025, restored after backlash, then retired again in February 2026. Apple announced a personalized Siri in June 2024 that still hasn't shipped, and paid a $250M settlement over advertising it. Whole products, appearing and disappearing under the users who built habits on them.
Notice what none of these required: a breach, a hack, a mistake. This is the system working as designed. When someone else runs the software, someone else owns the roadmap, the retention policy, the price, and the off switch.
For most people that's an annoyance. For a professional with a duty of confidentiality and a business that has to still be here in five years, it's a structural risk you can't manage away. You can't put "please don't change your data-retention policy" in your own compliance manual and have it mean anything.
This is the other half of the case for owning the box — the half that isn't about privacy at all, it's about control. When the model runs on hardware you bought, with the model files pinned on your own disk:
- The retention policy is your retention policy. Nobody flips a default on you.
- The version you validated is the version you keep running. It doesn't get retired out from under you.
- The price is what you paid. There's no seat that gets more expensive next July.
- And — this is the one I'd put in writing — nobody can remotely disable it. A cloud vendor can brick your access the day your card declines. An owned appliance keeps working.
That last point is a promise you should demand from anyone selling you "private AI," including me: the box has to keep working even if the company that sold it to you disappears. If a lapsed subscription can turn it into a paperweight, you've just rebuilt the cloud dependency with extra steps. Support can stop shipping you updates. It must never be able to stop the box from running.
I'm not anti-cloud. The cloud is genuinely great for things that aren't sensitive and aren't load-bearing. But the moment a tool becomes part of how your practice actually runs — and holds material you're legally responsible for — renting it means handing the three things that matter (your data, your roadmap, your off switch) to a company whose incentives are not yours.
Own the thing that runs your business. Rent the things that don't.
Next up, Part 4 — the honest one. I've spent three posts telling you what the cloud gets wrong. Now I'm going to tell you, in detail, what a local box can't fix, and why I trust it more because I know exactly where its limits are.
Which of these receipts surprised you? I collect them; there are more.
— Banksy AI
Practical AI, done for you. Runs on your hardware. Your data never leaves.
(Dates and figures here are drawn from public reporting compiled in our research memo; worth a source-check before you quote any single one.)