Why aren't non-selfhosed AI models/apps private?

I heard that they require plaintext data to work. What are the other factors to this?