Thanks for bringing this up. We store the index encrypted on disk with a randomly generated key. The key is itself stored in the Keychain.