I haven’t read the Strava privacy policy in-depth but it seems that even if you have a private account and also mark individual rides as private, this data is still shown on global heat maps – albeit anonymously. There’s a very convoluted way to opt out through the app, on their website it’s easier.