Lesson #1: only use software that encrypts the data on the client side before storing it on the server.