My understanding (could be wrong) is that it's all open source and they don't keep any of the users' data themselves.