Thanks for the question. There are a couple of commands you need to enable to pass the privacy through to the carrier SIP trunk.
First, make sure you have the "sip privacy" command configured globally. Second, put the command "trust-domain" on the SIP trunk facing the PBX and the SIP trunk facing the provider. That should do it!
That did it. Thanks much!