Account data seems to be encrypted on HP's servers. (Can't post the link, but it is Article ID: 19388 in the Support Knowledgebase at hpwebos dot com.)

But what about the data sent over the internet in order to be backed in the account? Is it sent plain text? Does anybody know?