@mcc my first thought from a security perspective was to have all local data wiped and replaced with {user}'s data on login, or potentially segregating it by auth'd user locally (trusted shared device). Both of those break the offline-online flow for anything that's not synced yet so my next issue is do I automatically assign anything local to {user} when they log in, or should I ask for each item if they want to sync or delete?
Idk if paper to digital forms are an upgrade sometimes.