AI companies should not be allowed to train models on private user conversations