Anyone could use a network sniffer to see it is uploading
something, but you can't tell what since the content may be encrypted. Advanced user may be able to follow the data in a debugger, but that's a lot of work. Very advanced user could instrument the code to perform data flow analysis, see
https://www.cs.cmu.edu/~wklieber/papers/soap2014-didfail.pdf