I have said it before, using an in house z-wave controller means nothing is sent to any outside entity unless you want it to be.
You can do port fowarding etc. at the router level if you want outside access, or if you so decide on some of them you can use the manufacturers cloud service, but as the controller is yours and at your home even if that company dies or turns off it's servers everything keeps working.