Learning across Data Owners with Joint Differential Privacy