Privacy diligence used to be a checklist item near the end of a term sheet process, but it’s now showing up earlier, and investors are asking sharp questions.