How can I really know that as a random user
Should security concerns really warrant not trusting the (reputable) vendor that the files are not being uploaded, you would need to do some sort of audit and/or run in an isolated environment and wouldn't be the "random user" referred to in OP.
If you also wear a tinfoil hat, delete the local storage, etc, after you are done using it.