Yes, with nostr a lot of your data is broadly available in many places... and that's pretty much where my understanding ends. There are ways to try to limit that availability but anything public is 100% public.