My personal view on this is that there are enough people who need this to not be happening or who would be very happy to catch any of the major frontier model providers fibbing about it, that needles are constantly being added to the haystack and searched for in subsequent models and requests made to them.

Proof of training or RAG search on data that was private would be a huge smoking gun and would change usage habits overnight.