The Good and The Bad: Exploring Privacy Issues in Retrieval-Augmented Generation (RAG)