Only when customers setting up hisi/her ChipBase by the App for the first time, the private key is generated inside the chip and only inside it.
Don’t trust the manufacturer if you feel not comfortable, you can verify by small steps.
We also provide a reset function in the app, so even if the manufacturer know the private key, you can refresh your ChipBase with new private key, unlimited times.