Similar to the implications of siri and Google now, I imagine.
Another comment mentioned that they use some Google speech recognition component, which probably means all of your conversations are delivered to Google. That's a big red flag for me.
I believe the Poketsphinx part is offline so only commands would be delivered to Google.