Unfortunately, until the server-side code is also open-sourced, it would impossible to say what anyone does with the data stored on a centralized server.

This is the first step toward making things transparent.