encrypt data locally, dont put unencrypted data online and keep everything you need to decrypt your data somewhere offline (safe deposit box,etc).