The best way is by personal recommendation. If you have any particularly sensitive files, I'd save them to an external hard drive, then delete them from the PC. From then on, only save sensitive documents to the external drive. Then, if it goes wrong in the future, not only is the technician unable to see anything you don't want him to, but also your documents are safe.
Surface Pro (2017) vs Surface Pro 4