1. The API gets it from somewhere, I just want to make sure it's not going to or coming from a foreign cloud service or something like that... some service I can't control.
2. I understand that, but saves/gets it to/from where?
3. I'm not trying to reinvent anything, I'm too ignorant for that - I just want to make sure everything I put on any internet aware chip stays there, and only there. Within reason, I'm not looking for a security lecture
4. I hope answers 1-3 help alleviate any concerns you might have about my inquiry.
5. No?! I'm not entirely sure what you mean - like as in, I can connect to any WiFi (my own or otherwise) without credentials? Never tried, don't care to explore it really.
I don't want to step on any toes, I'm only looking out for the two or three bucks I have in my bank account I hope to put toward another 8266-x someday.