Yes, In order to provide features like semantic search and autocategorization/clustering the system will need to store and process private information.
The guidelines that I follow are about using trustworthy technology companies and reduce the number of services that handle data to a minimum:
- Store data on S3 buckets and digital ocean servers protected by all types of security offered: 2FA, ssh key, IAM, etc.
- For AI models at first I will use openAI and anthropic APIs. In the future I would like to run my own models for better privacy.
- Don't use any other service, everything else runs locally inside digial ocean server, eg: vector databases, mongodb, etc.
So it's not an app to store passwords but I think these measures should do for general notes and files.