Owning the Seam Between Private Data and the Model