If third party does verification with ZKP, you only need to trust that third party. The company that requires verification will not have any data to store.