This question does not have a good answer. Most ICO's will use a third party service to perform the KYC check, and there are really only 3 big companies who do this. However your information will pass through the ICO's servers and the third party servers. The safety of your data will come down to the security measures each stop along the line uses.

Best to limit your exposure to only the projects you believe in the most.