Training and running machine learning models in ways that limit exposure of the personal data behind them.