Client-side is not cloud.

Yes, you can keep client-side reasonably secure. You can’t send the data for cloud processing and seriously expect much security or privacy… for now. Encrypt client-side and use cloud as storage… maybe; encryption algorithms also have a “best by” date.