This isn't a dupe of Bug #1054741, which addresses the privacy policy update. This is about bad ui that establishes an expectation of the kind of privacy one has in a "home", but then sends search queries to the world. The UI needs to make clear delineation between those 2 contexts.
I've updated the description to make this differentiation clearer, and to propose a specific solution with a UI mockup.
This isn't a dupe of Bug #1054741, which addresses the privacy policy update. This is about bad ui that establishes an expectation of the kind of privacy one has in a "home", but then sends search queries to the world. The UI needs to make clear delineation between those 2 contexts.
I've updated the description to make this differentiation clearer, and to propose a specific solution with a UI mockup.