Honest note: sync uploads a client-side encrypted blob to your own server (via suite-sync/), identified by a passphrase-derived Sync Key — the server can't read it. See suite-sync/README.md for setup; until that's deployed, this stays local-only.