In 2026, several vendors quietly changed what happens to your data by default. Privacy is no longer a setting you check once. It is a boundary you have to govern.