"Runs locally" is not the same as "private"

"Runs locally" is not the same as "private," and I say this as someone shipping a thing that runs locally.

Your projects, agents, notes, database, secrets: they're in a directory on your disk. Unplug the network and they're still there, still readable, still yours.

Inference is a different story. Unless you're running a local model, your prompts leave your machine for your provider. Local storage doesn't change that.

An updater that checks for a new build is a network call.

A peer-to-peer mesh is not end-to-end encryption. Those are two different claims.

Open Wireshark, run the thing, watch what connections it makes. A packet capture won't tell you everything, but it can test some of those claims.

What else do you see people fold into "runs locally" that doesn't belong there?