Momentarily yes it is out there, but provided the source is responsible with their data and properly manages the storage and disposal in a timely manner, then it shouldn't be an issue.
To this is end it is why I prefer to exchange all sensitive information VIA encrypted email, yes still relying on the person to then delete the email at the end of it, but it is better than being stored, even temporarily, on virtual machine, i.e. a cloud server, which is susceptible to attacks.
Same reason I only order online (for legit purchases) from HTTPS websites vs HTTP. I'll take that added SSL for security. Don't want anyone intercepting and reading the traffic and pulling out sensitive information.