I use Weave on 5 desktop systems to keep them all in sync and it works like a charm. Sync is handled through an outside server, but all data is encrypted client side with a key of your choosing prior to upload to the server. The username and password used to authenticate you to the service is separate from the key. If you don't want to use Weave, then just don't. Nobody is forcing you to do so.