Privacy and AI Risk: The Exposure Most Software Companies Miss