Zero Knowledge is a perfect fit for this scenario (due to the concerns you outlined), store the data encrypted on the server and decrypt it with some personal key (most likely the password - not great security but Better Than Nothing™). The trick is how to patch the data without decrypting it each time (or exposing the keys) - although for such small datasets even that wouldn't be _that_ painful. (Except you'd perhaps need to save the patch client side until the data is processed and the server acknowledges getting it, otherwise you risk losing data on sudden disconnects.)
I work on a Zero Knowledge PGP email service, I think about stuff like this a lot.
Would love to see Asana/Hackpad support soon.
setup was slick, but I think it might be better if you had a full page view of connecting your various accounts and showing the status of your accounts. The small modal area felt too squished.
I'm also surprised at how fast the indexing went, great job on that. I'll report back with search quality...