Sure, if the data uses an API call to the plugin developer’s server. For example, the Zeroqode Bubble page to PDF plugin sends the page’s HTML comment to a Zeroqode owned server so that it can return the rendered PDF.
You check the plugin code, or ask the plugin author.
No, they don’t have any access to the Bubble app or app data (unless you provide them data like in the scenario above).