My main concern with this is having this sensitive information just sitting there plaintext in some DB. I'd avoid putting personal stuff like this on the web at all.
Its open source too, I think.
Saving on Dropbox etc (can be done from client) might be a middle road if one trusts them more.