What Does it Mean for a Language Model to Preserve Privacy?