Y Combinator Challenge #19 - Application and/or data hosting

How are you going to handle security? If I'm sending my files to your UniversalAPI server, and then you forward them on to S3, are they stored in my account or yours?