If the data is only kept in your local storage, in something that you trust, like your firm, and it works in airplane mode with only Bluetooth on, then that is something that people can verify themselves. If it’s open-source, they can ask a friend with programming capability to verify that it does what it says on the tin.