[tonywebster]

There's another strong reason not to trust Evernote: nothing is encrypted at rest on your system or their servers, unless you manually go encrypt selected text in a specific note in the desktop application, where you have to make a new passphrase for each note you want this on. Even this was only recently upgraded from RC2 64-bit to AES 128-bit.

They claim they can't perform searches over encrypted data, but that doesn't seem too difficult to solve with an index file that's also encrypted.

Evernote does have some detailed security policies and 2FA, but without encryption at rest where only the user has the key, what's the point?