I was disappointed to find out that contacts are stored unencrypted in a sqlite database in home directory.