Evernote offers a cloud-based note-taking and clipping service that lets you save information for access from any internet-connected device. Tips for using Evernote are routinely shared on social media (just search for #evernotetip).

With that in mind, here are seven of the worst tips for Evernote (or any cloud-based storage):

Some premium (paid) Evernote users mistakenly assume that their Evernote data is somehow safe from external attacks. However, the security in Evernote premium is simply SSL encryption for data in transit, and AES-256 encryption for data at rest, but neither of these protects your data from being stolen by someone with your username and password. The only exception to this rule is if you explicitly tell Evernote to encrypt a specific note (more on that below). In short: storing unencrypted data on a server with internet access is not a good idea.

Perhaps you’re a teacher and you use Evernote to create individual portfolio files for each student, documenting everything. Compromising your teacher’s Evernote credentials could expose sensitive data about your students, who are likely minors. This tip not only poses a security risk to those students, but also has legal implications for the teacher (and the school where they teach).