Given how much care they took not to write the payloads to the phone storage, presumably they took the same care not writing it to server storage on cloud hardware.