So normally you would want to store your user’s sensitive data only in your backend. And not theirs.