Data recovery privacy