How to Find Open-Source Models / Providers that Do not Train on Data

A lot of people are saying just use X, just do Y, just run Z locally, but the best models cannot be run locally (GLM 5.1). No one ever talks about privacy, but for those concerned about privacy, how do we know when we use Z AI's GLM 5.1 that they aren't training on our requests and data?