If you're not using a Nip07 browser extension then a Nostr client has to have your private key in order to sign events. I strongly recommend you use a Nip07 extension because it's more secure. Alby and Nos2x are two popular ones.