Even if really keeps this sensitive data locally.. Most normies have poor opsec, this data will get leaked eventually.

And even of Microzuck say they keep it locally... Who knows? It's trust me bro proprietary tech, just like iOS.