[sneak]

It's not "all on device". Any Siri request that hits the network (which is many of them) send your entire address book to Apple.

Siri is a privacy nightmare and everyone sane turns it off immediately.