Initially, the claim was refuted by saying that this was data being sent to the cloud backup servers.
It was allegedly just a coincidence that the servers were located in China.
Therefore, this user decided to root his phone and install a different ROM.

and he still found data being sent to the same servers.
The report said the IAF alert was based on the inputs from CERT-In, Indias premier cyber watchdog.

source: www.techworm.net