There is no data privacy on Nostr, unless you are on AUTH relays and/or using encryption.

And I am not sure about encryption.

And some AUTH relays aren't very good.