If anyone out at MAX is reading this. can you give me a hint about data security in Apollo?

The scenario is this: we have a recruitment system. It stores some potentially sensitive data about recruits - things that I would not leave out in the open personally. so naturally we take care to not do it with their info.

When Apollo is in "disconnected" mode there's got to be some sort of local data storage that kicks in. All I've spotted so far on what that local data store is is this blog post. XML and TXT aren't what I'd consider "secure" if they can be read by other apps on the machine.

So how do I ensure that this data would be protected when the user is disconnected from our secure web services? Also somewhat curious about a sync API or something similar.

I wish I was in Vegas to ask these questions personally!