Turns out is public, and also, you can't prevent someone from following you if you send notes using public relays.