All of the user data is kept on the phone and not sent anywhere (except to the companion devices such as smartwatch to display the data).

Exception is the crash reporting data that sends non-idenfitying information that will aid resolving the issue, such as your phone model. Full crash reporting policy can be found here: http://try.crashlytics.com/terms/