Local-first software keeps the primary copy of your data on your own device, and for note-taking that single design choice is why Obsidian protects your privacy in a way cloud note apps structurally cannot. When your notes are plain files on your disk, no company holds them, no server can be subpoenaed for them, and no outage or shutdown can lock you out. A cloud app like Notion or Evernote inverts that: the real copy lives on its servers, you get a synced view, and the company holds the keys. Both models can be called secure, but only one lets you actually own your notes. If your work lives in an Obsidian vault, that ownership extends to your tasks too, since a local layer like ZPXE ranks them on-device without anything leaving your machine.
This is not an argument that the cloud is bad. It is an argument about who is in control, and for a personal knowledge base, most people want that to be themselves.
What local-first actually means
The term comes from a 2019 essay by researchers at Ink and Switch, who set out seven ideals for software that gives users both collaboration and ownership. The central one is simple: the copy of your data on your device is the primary copy, and servers, if they exist at all, hold secondary copies only to help sync between your devices. That inverts the cloud model, where the server copy is primary and your device shows a cache.
The practical consequences follow directly. Local-first software works fully offline, because the data is already there. It survives the vendor disappearing, because the files remain yours. And it is private by construction, because there is no server-side copy for anyone to read. These are not features a cloud app can bolt on; they come from where the primary copy lives.
Why Obsidian is local-first and cloud apps are not
Obsidian stores every note as a Markdown file in a folder on your computer that it calls a vault. There is no account required to use it, nothing is uploaded by default, it is free for personal use ($0), and you can open those same files in any text editor, today or in twenty years. That is local-first in its purest form: your notes are ordinary files you own.
Cloud note apps work the other way around. Notion, for example, stores your content on its servers, encrypted at rest, but not end-to-end encrypted, which means the company holds the keys and can in principle read it. The app on your screen is a window onto that server data. This is convenient, and for collaboration it is genuinely useful, but it means the company, not you, holds the primary copy of your thinking.
| Property | Obsidian (local-first) | Cloud note apps |
|---|---|---|
| Primary copy of your notes | on your device | on the company’s servers |
| Works fully offline | yes | partially or not at all |
| Who can read your notes | only you | the company holds the keys |
| Survives the vendor shutting down | yes, the files are yours | no, access ends |
| File format | plain Markdown you own | proprietary, exportable |
The privacy that comes for free
Because Obsidian keeps the primary copy local, its privacy is not a policy you have to trust, it is a property of where the data sits. There is no server-side copy of your vault to be breached, sold, subpoenaed, or fed to a model, because there is no server-side copy at all unless you deliberately turn on sync. And Obsidian’s official sync is end-to-end encrypted, so even when your notes do travel between your devices, only your devices can read them; the company sees ciphertext.
Contrast that with a cloud app’s privacy, which rests on the company’s promises: that it will not read your data, will not train on it, will secure its servers, and will stay in business. Those promises may be sincere and often are, but they are promises, and a breach or a change of ownership can undo them overnight. Local-first privacy needs no such trust, because the thing that would have to be broken, a central store of your notes, does not exist.
Where local-first is the wrong choice
Honesty requires naming the trade, because local-first is not free of cost. Its weakness is exactly the cloud’s strength: real-time, many-person collaboration. If several people need to edit the same document at once and see each other’s cursors, a cloud app does that far better than a local-first tool, whose sync is designed for your own devices rather than a live shared session. Local-first also asks a little more of you around backups, since there is no invisible always-on cloud doing it, though syncing your vault to any encrypted backup closes that gap.
| Choose local-first when | Choose the cloud when |
|---|---|
| You want to own and control your notes | A team edits shared docs live |
| Privacy is a hard requirement | Convenience outweighs ownership |
| You work offline often | You need many-person real-time collaboration |
| You want plain-text longevity | You want zero setup and invisible backups |
For a personal knowledge base, the local-first trade is usually the right one: you rarely need live multiplayer editing of your own notes, and you always benefit from owning them. For a shared team wiki, the cloud may genuinely fit better.
Longevity: the privacy angle people forget
There is a second kind of ownership local-first gives you, and it matters more the longer you keep notes: durability against the tool itself disappearing. Cloud note apps are businesses, and businesses get acquired, pivot, raise prices, or shut down. When they do, a proprietary cloud store can leave your notes stranded behind an export button that may or may not still work. A local-first vault has no such dependency: the Markdown files sit in a folder you control, readable by any editor, so the notes outlive the app that created them. This is why people with a decade of notes increasingly favour plain-text local storage, not for privacy alone but because it is the only format they trust to still open in ten years.
Privacy and longevity turn out to be the same property viewed from two angles. Both come from the primary copy being yours, in an open format, on your device. A cloud app can promise privacy and can promise to stay in business, but both are promises about the future; local-first replaces them with a file on your disk, which needs no promise at all.
Tasks belong on the private side too
One under-appreciated point: local-first should extend to your tasks, not just your prose. If your notes are private but your to-do list lives in a cloud task app, you have split your work across two trust models. Keeping tasks in your Obsidian vault, as plain text alongside the notes that give them meaning, keeps them under the same local-first guarantee. The gap is that Obsidian does not rank those tasks for you; that is the job of a deciding layer. ZPXE fills it entirely on-device, reading your task files and ranking today’s priorities locally, so the private side of your setup covers deciding what to do next, not only writing it down. The full picture of that task layer is in Obsidian task management, and the privacy trade-offs of any note tool in the best privacy-first Notion alternatives.
Key takeaways: local-first privacy for your notes
Choose a local-first tool like Obsidian when you want to genuinely own your notes, because keeping the primary copy on your device makes privacy a structural property rather than a promise you have to trust. Cloud note apps hold your data on their servers and their keys, which is convenient and good for live collaboration but means the company, not you, controls your thinking. Accept the one real trade, weaker real-time multiplayer editing, in exchange for offline access, vendor independence, and privacy no breach can undo. And extend the same guarantee to your tasks by keeping them in the vault, ranked locally, so nothing about your work has to leave your machine.
Quick answers
What does local-first mean for note-taking?
Local-first means the primary copy of your notes lives on your own device, not on a company’s server. The app works fully offline because the data is already there, and any sync only moves secondary copies between your devices. For note-taking, Obsidian is the clearest example: your notes are plain Markdown files in a folder you own. The idea was defined in a 2019 Ink and Switch essay as software that gives you both collaboration and genuine ownership of your data.
Why is Obsidian more private than cloud note apps?
Because Obsidian keeps the primary copy of your notes on your device as plain files, there is no server-side store of your vault for anyone to breach, sell, or read, unless you deliberately turn on sync, which is itself end-to-end encrypted. Cloud note apps store your content on their servers and hold the decryption keys, so their privacy rests on promises not to read or misuse it. Obsidian’s privacy is a property of where the data sits, not a policy you have to trust.
Do local-first apps work offline?
Yes, completely, and that is one of their defining traits. Because the primary copy of your data lives on your device, a local-first app has everything it needs without a connection, so you can read, write, search and reorganise your notes on a plane or with no signal. Sync, when you use it, simply reconciles your devices the next time you are online. Cloud apps, by contrast, often degrade or stop working entirely when the connection drops, because the real data is remote.
Is local-first less convenient than the cloud?
In one specific way, yes: real-time, many-person collaboration. Cloud apps let several people edit the same document at once and see each other’s changes live, which local-first sync is not designed for. Local-first also asks slightly more attention to backups, though syncing your vault to any encrypted store closes that gap. For personal notes those costs are small, since you rarely need live multiplayer editing of your own vault, and the ownership and privacy you gain usually outweigh them.
Can I keep my tasks local-first too?
Yes, and you should, or you split your work across two trust models. If your notes are private but your to-dos sit in a cloud task app, part of your work still leaves your control. Keeping tasks as plain text inside your Obsidian vault holds them under the same local-first guarantee. Obsidian does not rank those tasks itself, but a local deciding layer like ZPXE does it entirely on-device, so choosing what to work on next also stays private.
