You're not. You're storing a private key on a device, and using something like a fingerprint or pin to unlock it and use it to authenticate. The fingerprint data is also only stored on the local device.
Yeah. Except if the usual Qualcom spy chips (also available in Google Pixel) phone home all your biometrics...