It's not relevant that it's Google. The pertinent information [to me] is that it's not a certified host for this confidential data; that the data has been sent outside of the UK; and to a lesser extent [for me] that the data is by virtue of the host it's been sent to legally and undetectably accessible by a foreign government.