Each of a plurality of edge computing devices are configured to receive data streams generated by at least one sensor forming part of a respective medical device (e.g., a sensor-equipped surgical tool, etc.) which, in turn, characterizes use of the respective medical device in relation to a particular patient. Each of the edge computing devices can execute at least one machine learning model which generates or from which model attributes are derived. The generated model attributes are anonymized using an anonymization technique such as k-anonymity. The anonymized generated model attributes are homomorphically encrypted and transmitted to a central server. Encrypted model attribute updates to at least one of the machine learning models are later received from the central server which results in the machine learning models executing on one or more of the edge computing devices to be updated based on the received encrypted model attribute updates.