One question that pops up is: is the data transfer activated only if you pair the desktop app with the iOS app? (EDIT: re-read your answer and now I see that you replied to this already)
Can we remain sure that no data is sent otherwise?
As well: being able to launch a command on specific events would be nice for us hackers (if it's not already there, didn't check yet in depth).