Yours stays yours.
Personal computing only means something if the personal part stays private.
Control
The default should be the private one.
A setting that protects you only if you find it is not protection, it is paperwork. What is private should be private before anyone touches a switch.
Your data
Kept where it is useful, which is with you.
Running intelligence on the device rather than in a data centre means most of what you do never has to leave it. Where something does need to leave, we intend to say so plainly and let you decline.