[throwaway40483]

Well, according to Amazon nothing is sent to their server unless Alexa is awake (after saying the magic 'Alexa' keyword).

[CaptSpify]

And we all know Amazon would never lie, and that the Echo could never be compromised...