One, application data should be sandboxed. No one other than the application itself should have access to it.