i work with private clients in this capacity. it's highly personal, though there are general best practices. knowing your threat model helps you navigate the give and take between convenience, privacy, and risk.