If you're in the US and your data passes through a pipe outside of the country, to say go to an email server, they nab it too. It has to be encrypted locally to be secure.