Has that actually been verified by a third party auditor? After the "deleted photos reappearance" incident, I would imagine that any Apple promise of "processes initiated from your device stay on your device" would just be a marketing tagline with an escape clause in one of their EULAs.