The whole thing is going to be run on a local LLM.
They don't have to upload that data anywhere for this to work (it will work offline). But considering what they already do, Microsoft is going to have to do a lot to prove that they aren't doing this.