The Price of Privacy for Low-rank Factorization