> academia + ml

Data curation seems like a privacy-friendly way to use sensitive data. Keep the private set locked away, and only use it to *pick* which public samples to train on. We show that this is not private.