the concern is that you have saved data of the submitting user on your server you own. be it in wp backend or database which is only destined to go to an external specific email you have no access or policy to.Or in our case even on the own server.
I would suggest this plugin to my agency if you can disable the submission savings. Otherwise its not usable.