Just because the data flows to somewhere you control doesn’t mean it has to be local.

I mean we’re firmly in hobbiest/semi-pro territory here but shipping the data encrypted to your own cloud instance or box colo’d in a local data center would be fine.