But I don't advertise my services saying that user's info stays on device, because I know I'm sending their info to a 3rd party, be it their emails, phone numbers, IPs and all that jazz.
When Google gets a leak of user info and all your user's phone numbers get exposed, how are you going to explain to them that their personal information got out through a third party when you promised that "data stays on device" ?