Open any popular notes app and watch what happens when you type. The words leave your keyboard, get serialized, get encrypted (hopefully), and travel across the internet to a data center you'll never see. They live there. Your notes app is really a window into a remote database with your name on it.
This is so normal we don't even notice it anymore. But it's a fairly recent default, and it costs more than most people realize.
What "the cloud" actually is
"The cloud" is just someone else's computer. When your notes live there, three things become true at the same time:
- You don't fully own them. You access them under terms of service that can change. If the company shuts down, gets acquired, or bans your account, your notes can become inaccessible overnight.
- You depend on a connection. No internet, no notes. Most apps cache locally for offline use, but the canonical copy is somewhere else.
- You inherit their security posture. Every breach of their servers is a breach of your notes. You can't audit their employees, their access controls, or their infrastructure.
The local-first principle
Local-first software flips the relationship: your device holds the canonical copy. The network, if used at all, is for sync between your own devices — not for storage on someone else's.
The data lives where you live. The app is a tool you use on it, not a gateway to access it.
This isn't a new idea. It's how every desktop app worked before the cloud era. What changed isn't that local-first stopped making sense — it's that selling cloud subscriptions makes more money than selling apps once.
What you get back
When notes are local-first:
- They work everywhere. Airplane mode, dead Wi-Fi, no signal — none of it matters.
- They can't be scanned. Server-side scanning for ads, AI training, or "safety" requires the data to be on a server in the first place.
- They don't disappear. Account bans, service shutdowns, and billing failures can't lock you out of your own writing.
- They're not part of a breach surface. The biggest breaches of the last decade were all server-side. Notes that never leave your phone are not in those headlines.
The honest tradeoff
Local-first isn't free. The main thing you give up is automatic cross-device sync. If you want your notes on your phone and your laptop simultaneously, someone has to coordinate that.
The cloud's pitch is: let us coordinate it for you, in exchange for permanent custody of your data. That's a real convenience, and for some workflows it's the right call. But for the bulk of what most people put in a notes app — daily journaling, lists, drafts, half-formed thoughts, financial scratch work, medical notes, passwords-you-shouldn't-store-here-but-do — the convenience isn't worth the custody trade.
How BetterNotes implements it
BetterNotes stores every note, checklist, RSVP reader, drawing, folder, and setting in your device's private storage. There is no account. There is no sync server. There is no cloud bucket with your username on it, because we never created one.
If you lose your phone, your notes are gone — which is the same risk you take with any local-first tool, and is the price of the guarantees above. We recommend Android's built-in backup mechanisms if you want a safety net.
This is the version of the app we wanted to use ourselves. We think it's the version more people will want, once they realize the alternative was never inevitable.