Where does a personal agent keep your data?
Meido keeps the process, the workspace, the memory file, the Obsidian vault, and secrets on the computer where you installed it. The desk binds to localhost. A cloud model still receives the prompt for that turn when you pick one. A Telegram, Discord, WhatsApp, or WeCom connection sends those messages through that network.
Binding the desk past this machine is a separate choice. That setup needs a web access token, saved under Settings → Environment or in the setup wizard. Channel tokens are stored for the bots you add. They are not a copy of your vault.
| Data | Where it stays |
|---|---|
| Memory file, briefing, persona folder | On this machine |
| Vault notes and SOPs | Markdown in your Obsidian vault |
| API keys and vaulted secrets | Stored locally. The desk shows names, not values. |
| Files the agent may touch | The workspace, plus paths you list for that persona |
| A turn sent to a connected cloud model | That provider receives the prompt |
| A reply sent on Telegram, Discord, WhatsApp, or WeCom | That network carries the message |
How Meido does this
- Path scope is per persona. Tool use is authorized on the server. The workspace is reachable. Paths outside it are reachable only when they are listed. See Permissions.
- Secrets stay masked. Provider keys, channel tokens, and names the agent stores are kept locally. A blank secret field is skipped. Output is redacted. See Secrets.
- The vault is files you can open. Notes and operating procedures stay Markdown. Memory tiers are a separate file you can edit from the desk. Changing the vault path needs a restart. See Memory and Restart.
Questions
If the model is in the cloud, what is still private?
The files, memory, vault, and secrets remain on disk here. Only the turn you send to that model leaves.
Can a persona read the whole disk?
It can read the workspace. Anything outside that list is blocked until you add the path under Persona → Engine → Paths outside the workspace.
Are secrets visible in chat?
The desk shows the secret’s name. Output is redacted. Forgetting a name is done from the persona screen, and the value is not shown there.