Nobody has access to the private key except your wallet.
..Unless you wallet is running on a compromised general-purpose machine.
Call me paranoid; but you have to plan for the day Microsoft, Apple, Facebook, and Google may be compelled to steal your funds.
If you are paranoid the only thing you must do is signing your message from a cold address. ( or trezor like device)
And then login on your favourite site.