Where this one gets misread
Where inference runs decides what leaves your network, and it is a separate question from where the documents are stored. A system can hold every file on your own hardware and still send the passages to an external model to get an answer.