Even if it is, the software on the device could theoretically do whatever it wants with the data before it's encrypted/uploaded, and if it's sent to Apple, they could do whatever they want with it too.

It is encrypted. When you can run software on a device with a developer cert you can do a lot.