It's up to the web app developers to expose the information they want indexed. Google absolutely should not start indexing private data in their public index, and I seriously doubt they're that dumb.
One thing I could see them doing is having a separate opt-in service for web apps, something akin to OS X's Spotlight or Google Desktop Search.