I get the concern. I don't think the characterization is true at all (I've used todoist, I've used asana), but I do care about privacy, and I do care about owning my data, which is why it is at least as easy to take out (if not easier), then it is to put in.

If you use it, your list goes to Anthropic to be ranked, under commercial terms that exclude training on it, and I never look at it (I've built support tools to help customers, but they won't access user data unless the user opens a support case, and then explicitly grants access for a temporary time). It isn't open source, but you can export everything at any time as plain text or JSON.

I also get the company concerns... When I was at Google, there were strict rules, and I used buganizer (among other internal systems), but even at Google there were external companies that were trusted with this kind of data once they'd been reviewed (for example, I used asana while I was at Google).