Dropbox and other 3rd party sites might be fine for non-sensitive data, but as evidenced byDropbox recently being hacked
, it is not a good idea for things you don't want out in the public.
Just a quick note here... the issue with Dropbox being hacked is a technicality... There was a Dropbox employee who's dropbox account password was the same as his Linked In password... technically the breach was caused by the Linked-In hack... The Dropbox employee had a project folder that contained the usernames of Real Customer logins... those customers started to get spam in dropbox-only not used anywhere else email addresses.
ok. to the real solution, sj3vans you are correct, the only real solution is for the church to provide a storage location. There are currently a couple of really good commercial products that could fit the bill. Oxygen (the most robust back end storage options), Citrix Sharefile (on premise is releasing soon), Symantec has an offering-in-waiting and VMware Octopus is also an offering-in-waiting. These solutions all have a concept of a shared personal drive and a 'company' drive. A company drive could be setup as a Unit.
The issues around it, (1) generally if you are concerned about privacy and protecting data, you'll want pre-internet encryption, and encryption at-rest. This narrows the field, and generally means that the app must be wrapped in some kind of sandbox solution (Think private company app store) with a modified version of the app that doesn't allow exporting of the data. This is a bit of a bummer because then you can't use it for anything unless that private app store also gives you quickoffice, office, or something else useful to modify the data or view it. (2) LDS Account integration, this limits the playing field because most companies (Owncloud included, though I seem to recall a SAML plugin...) are already on Active Directory for accounts, so the rollout at the enterprise layer is focusing on LDAP integration first. We may need to do something a bit more unfriendly like sharepoint or something that stores data on the server only, and while bits are copied to be viewed, they are never permanently stored online.
What we really need is a good encryption tool that works on Android/IOS/Windows/MAC that could do the pre-internet encryption and then do the at-rest encryption, that way something like Dropbox, Drive, Skydrive, and the dozens of others might work for us.
Seriously... if you want to earn a gazillion dollars, write that encryption software...