The promise of cloud sync is simple: your files appear on all your devices, automatically, without you thinking about it. The reality is that this happens because your files — photos, documents, notes, everything — are continuously uploaded to a server controlled by a company you’ve agreed to let hold them.
For many people, that trade-off is worth it. For people who want sync across devices without cloud middlemen — whether for privacy, cost, or control — the options are better than they’ve ever been, but they require deliberate setup.
What “Sync” Actually Means Under the Hood
When you save a file on your laptop and it appears on your phone, what’s happened is:
- Your laptop uploaded the file to a cloud server (Google Drive, Dropbox, iCloud)
- Your phone pulled the file from that server
- The file now exists in three places: your laptop, the server, and your phone
The cloud server is the intermediary. It’s what makes sync reliable across devices that aren’t on the same network. It’s also the thing that means a third party — the company running the server — has access to your files.
The privacy implications depend on what that company does with the files it’s holding. An advertising-funded cloud service has structural incentives to analyze content. A storage-focused service with explicit no-data-use commitments has different incentives. And some sync architectures eliminate the cloud intermediary entirely.
Understanding which model you’re using is the first step to deciding whether it’s the right one for your files.
The Four Main Sync Architectures
1. Cloud-synced storage (the default)
Google Drive, iCloud, Dropbox, OneDrive. Files live on the company’s servers. All devices sync to and from those servers. The company holds keys and can access your files under appropriate conditions (legal requests, internal access for support or product improvement).
This is the dominant model because it’s the most reliable and requires no setup. It works between any devices on any network. The privacy cost is proportional to how much you trust the company’s handling of your content.
2. Privacy-committed cloud storage
Same basic architecture as above, but from a provider whose business model doesn’t depend on analyzing your content. No advertising revenue, no data sales, no AI training on user files. The provider holds encryption keys (server-side encryption, not end-to-end), but there’s no financial incentive to look at your files and an explicit commitment not to.
daftei uses this model: AES-256 encryption at rest, TLS 1.3 in transit, GDPR and CCPA compliant, no ads, no data sales, no third-party AI training on your content. If you want files available across iOS, Android, and web without handing them to an advertising-funded platform, this is the practical middle path.
3. End-to-end encrypted cloud storage
Files are encrypted on your device before upload. The cloud server stores encrypted data it cannot decrypt. Proton Drive, Tresorit, and Internxt work this way.
The privacy guarantee is stronger: the provider could be compelled to hand over your files and the result would be useless encrypted data. The trade-off: some sync behaviors become more complex (multiple device keys need to be coordinated), and the provider can’t offer server-side features like intelligent search or AI organization.
This is the right answer for files with the highest sensitivity. For everyday sync across a phone, laptop, and tablet, the added friction can outweigh the benefit for most people.
4. Peer-to-peer / local network sync
Files sync directly between your devices, using your local network as the transport. No cloud server is involved at all. Two main options:
Syncthing: Free and open source. Devices on your local network (or over the internet using relay servers, optionally) sync directly with each other. Your files never touch any company’s server.
Local SMB/NFS share (NAS): A home network-attached storage device acts as the sync hub. Your devices connect to it when on your home network; you configure off-network access if needed.
The privacy benefit is complete — no third party ever holds your files. The operational trade-off: sync only works reliably when devices are on the same network (or when you’ve configured more complex networking for remote access). Updates don’t propagate until devices connect.
Choosing the Right Model for Your Files
Not every file needs the same privacy protection. A practical approach is to segment your files by sensitivity:
Public or low-sensitivity files (work documents shared with colleagues, files you’d be fine with anyone seeing): Any sync model works. The convenience of Google Drive or Dropbox is probably worth the trade-off.
Personal but not highly sensitive (photos, journals, personal documents you’d prefer kept private): Privacy-committed cloud storage gives you meaningful protection without the complexity of end-to-end encryption or self-hosted sync.
Highly sensitive (financial records, medical documents, legal files, things you’d genuinely never want anyone to access without your explicit permission): End-to-end encrypted storage or local-only storage with no cloud component is worth the added setup.
Most people find that the majority of their files are in the second category, and a move from advertising-funded cloud storage to privacy-committed storage covers the realistic threat without requiring significant changes to how they work.
Setting Up Syncthing: The No-Cloud Option
If you want sync without any cloud server involved, Syncthing is the most mature option available. Here’s the basic setup:
What you’ll need:
- Syncthing installed on each device (free, runs on Windows, macOS, Linux, Android — iOS support via Möbius Sync)
- Both devices on the same network for the initial setup
The basic process:
- Install Syncthing on your first device and generate a device ID
- Install Syncthing on your second device and add the first device by ID
- Create a “folder” on the first device and share it with the second
- Accept the share on the second device
Once connected, files in the shared folder sync between devices automatically when they’re on the same network. If you want sync to work away from home, Syncthing has relay servers (they relay encrypted data without seeing its content), or you can configure direct connection through your router.
The honest trade-offs:
- Setup is more involved than installing Google Drive
- Sync doesn’t happen if devices haven’t connected in a while
- You’re responsible for backup — Syncthing keeps files in sync but doesn’t itself provide a backup if you delete something on one device
- iOS support is third-party and less seamless than Android
For technical users or those willing to spend a couple of hours on setup, Syncthing is a genuinely excellent option. For people who want something that just works immediately, the privacy-committed cloud storage approach requires much less configuration.
The Backup Problem That Sync Doesn’t Solve
Sync is not backup. This is a critical distinction worth making explicit before you change your storage setup.
If you delete a file on one device, sync propagates that deletion to all other devices. If a file is corrupted, the corruption syncs too. Sync keeps all your devices consistent — it doesn’t protect you against mistakes or hardware failure.
A proper backup strategy for private files needs at least two components:
- Off-device backup that isn’t affected by sync (a cloud storage account you don’t actively edit, or an external drive you update periodically)
- A retention period during which deleted files can be recovered
Some cloud storage services (including daftei’s 30-day grace window for deleted content) build recovery into the deletion flow. For files that only exist on your local devices with peer-to-peer sync, you need to manage this yourself.
A Practical Setup for Most People
For most people who want to sync files across devices privately without a complicated technical setup, a straightforward approach works:
Primary sync: Privacy-committed cloud storage (access via web, iOS, and Android apps). Files are accessible on all devices, encrypted in transit and at rest, with no advertising or AI training on your content.
Secondary backup: Encrypted external drive, updated when you think about it. Not automated — just a quarterly or semi-annual copy of your most important files onto physical media that lives somewhere other than your home office.
For highly sensitive files only: Keep them local. An encrypted folder on your device (using FileVault on Mac, BitLocker on Windows) for files you never want in any cloud. Back these up to encrypted external drives only.
This setup doesn’t require any special technical knowledge, works reliably across devices, and addresses the realistic threat for most personal files without the overhead of a fully self-hosted solution.
One Consideration That Often Gets Missed
File sync privacy is often framed as a binary: either you trust a cloud provider, or you self-host everything. Most people are better served by a more nuanced approach: choosing a provider whose business model aligns with your privacy interests, and reserving more complex solutions for the files that genuinely require them.
An advertising-funded cloud service analyzing your files is not in the same category as a privacy-committed storage service that doesn’t. The difference isn’t just marketing — it’s a structural difference in what the company gains from your files and what it’s incentivized to do with them.
Understanding which model your current sync setup uses is the first step to deciding whether a change is actually warranted — and if so, how much change.