Baidu has denied such allegation, claiming that:
1. It's a cloud based IME. Some data is uploaded to improve user experience.
2. Data upload is encrypted therefore no privacy concerns.
3. Servers are located in Japan and complies with local regulations.
http://tech.qq.com/a/20131226/014894.htm (Don't shoot the messenger.)