The idea of having a general personal data store and then apps which interact with that via an api isn't necessarily a bad one. That kind of separation might be easier to defend from a security perspective, especially if the api can be fully tested or have formal proofs done on it.