[wutanc]

I don't really mind this way of doing it since I know that my data is "safe". I can at any time just grab my vault and open it in any editor. I can write my own editor. I can import the data into most other tools. It's when the data isn't open that I tend to avoid the product.

[fc417fc802]

Exactly this. Conversely, most open source apps on android might as well be closed source with regards to your practical ability to export your data unless you use a ROM that gives you some form of root access (such as adb root).

[jaspanglia]

This actually looks refreshingly simple. A lot of note-taking apps become productivity operating systems after a while.

[AuthAuth]

Its "safe" as in you can access it but its not safe from Obsidian accessing it.

[hogwasher]

If you don't use their sync service, all your vault files are local only, and there isn't any mysterious telemetry happening in the background.

If you do use their sync service, it's end to end encrypted with your own local-only password, so Obsidian doesn't have a backdoor to your encrypted remote files either.

If you don't trust Obsidian's sync service, but want to sync files, you can sync your files in any other way you choose, like with git or webdav. You can keep it all self-hosted if you want to.

You could encryt your entire local vault too if you want to.

Obsidian's business model is just selling the sync subscription service. There's no ads component to incentivize data collection/tracking and pissing off their entire customer base.

So I can't find it in me to be worried about this one.

And if Obsidian did go rogue one day, the files are basically exported already, so whatever, it'd be easy to switch to something else.

I think the open-source obsidian plugins that aren't yet popular enough to have a lot of eyes actually checking over the source code yet are more suspect than Obsidian itself. Open-source on its own doesn't always actually prevent malicious actions or privacy violation, since most people just treat "open-source" as "this app is automatically trustworthy because surely someone else is keeping on eye on it" and either don't know how or don't bother to look at the source code themselves. But I'm not actually worried about that, either.

[troyvit]

> If you don't use their sync service, all your vault files are local only, and there isn't any mysterious telemetry happening in the background.

I think the parent's point is that Obsidian could add any tracking they wanted and -- unless you're examining their TOS or your network closely -- you might never know. However:

> Obsidian's business model is just selling the sync subscription service. There's no ads component to incentivize data collection/tracking and pissing off their entire customer base.

And that to me seems deeply infused into Obsidian's entire culture. They built a community and they're not gonna mess that up. And like you say, if they do it's trivial to move one's markdown somewhere else.