In reading about Sync, I was surprised to see their claim that they never hold the encryption keys, even when signing in from mobile devices. This is in contrast to SpiderOak, which says that if one signs in from a mobile device or on the website, they hold keys in RAM for the session.