They're certainly not the only ones in this space, but they've been talking about differential privacy recently[1]. So there are possibilities between "everything is on our server" and "everything is on your device".

[1]: http://www.recode.net/2016/6/24/11967188/apple-data-collecti...