Therapist started using AI Technology to record audio files of our sessions

I'm from Germany and having group therapy and after about 10 sessions our therapist suddenly started using AI Software "Tandem Health" to record audio and automatically transcribe it into notes. She introduced the software for about a minute at the beginning of a session and then asked us to sign papers that she sent via mail right before our session started. She emphasized the importance of signing it right away, so she can test it out immediately. Due to time and group pressure, combined with giving the therapist the benefit of the doubt, I signed it without having the time to read it. She did also mention that she was unsure about what to think of the technology yet. To be clear the session has already started and sitting down to read and fully process this would have taken away not only mine but the therapy time of 9 others as well. I felt uncomfortable during the session and didn't participate the way I usually would.

The following week I did research about the service she's using and found several data protection problems. The audio files are being processed on the cloud using Microsoft Azure and Elevenlabs, both US companies. Tandem Health does comply with GDPR laws, which should guarantee that sensitive data cannot leave the europe. The data centers are based in Europe, but are using Microsoft software. According to a Microsoft Employee it cannot be guaranteed though that the US government accesses the data, which adds an extra layer of concern. But even if the data was guaranteed to stay within Europe, it would still mean that unfiltered, non anonymized audio files of therapy sessions are being processed somewhere in the cloud. There's an obvious cyber security risk, but also no way to guarantee that the data isn't being used in ways that it shouldn't be.

After voicing my concerns with my therapist via mail, she talked to me 1on1 right before the next group session for 5 minutes and got defensive making it seem like I'm implying she didn't do any research, which was definitely not my intention. She downplayed my concerns making it seem almost irrational to care about how my sensitive data is being used and stored using straw man arguments like saying that patients technically shouldn't bring their phones into the group therapy, cause they could be recording. Since we talked right before our group session I felt like I couldn't properly defend myself, because I didn't want to make everyone else wait.

During the session itself I was stuck in my head to try and make sense of it all and she definitely noticed. She asked me to give my input after some other patient shared something, but I couldn't really participate, because my mind was elsewhere.

I don't know how to handle this situation now, because she basically told me that I have to play by the rules and accept that she's gonna be recording and sending sensitive data into the cloud, even if it is technically in compliance with a bunch of EU regulations, but I think these regulations do not provide enough security to justify the risk and sacrifices of the patients.

It's difficult to make sense of it, because she couldn't give me any reasons why she wants to use this software outside of "having to go with technology". She couldn't even say how it concretely helps her now. How can I be okay with a therapist compromising my personal medical data, if she can't even tell me how it helps her?

She's been an amazing therapist outside of that and therapy has helped me greatly in a very difficult time. It feels like I'm essentially being forced to either give up on my principles, but also feeling bitter towards my therapist because she makes me do that or having to look for other options. I searched for years before finding therapy and I'm honestly in an acute situation where help would be needed right now.

What can be done to salvage this situation?