Regarding the ownCloud service, where confidential data maybe stored, the first thing to do is to secure the frond end seting up an SSL security and force HTTPS connection so that your passwords do not circulate in clear text on the WWW. It’s take less than 10 minutes and that prevent some data leak. See