That is something you can see by looking at raw data, before having them aggregated in sleep stages.
Raw data never get uploaded to the server but a 3rd party app using the device API can get access to them asking permissions to the user.
(you thought you were the only one to have that idea right? :))