Plex pulls the metadata for your library from public sources like thetvdb.com.

The server and clients use plex.com to authenticate users.

There are alternatives like Jelly Fin that should better alleviate your concerns.