This is (1) in Safari, and (2) with Spotlight Suggestions disabled. Spotlight and Safari should be able to get search engine results or suggestions from the search engine without needing to go through Apple. We can speculate on what Apple is doing with this data, but it certainly seems to violate the user's "right to privacy," if not more.