Both Scootpad and Edmodo are hosted applications - in other words the program and data are indeed stored in the cloud - on servers outside our own district. Since neither of these programs contain data that is subject to FERPA regulations, we feel comfortable using these cloud-based sites.  For sites that do have data that is covered by FERPA laws, we make sure there is an encrypted (https) connection to those resources. Studies consistently show that cloud-based security is very good. We do a regular computer security audit by an independent company and have always passed with flying colors. The most recent one was last spring.

Student names and data are also a part of many other databases in the district including Naviance (guidance), Viewpoint (data warehousing and analysis), Moodle (online course management), GoogleApps for Education (email and online productivity tools), the library catalog, and many instructional programs that track student goals in content areas such as reading and math programs. Our district, of course, is not alone in this use of technology to record student data and we do take data security and privacy seriously. 

The primary database is our student information system (Infinite Campus) and most student information in other databases is imported from it. Infinite Campus is housed within our district, behind our firewall and on our network. The physical server itself sits in rented space at the secure data center of our local telephone company. Our IP addresses are all subnetted - in other words, the outside world only sees a single IP address for all equipment on our network - another security precaution.

School computers are only as secure as the people using them are knowledgeable. We ask that all computers be password protected, that screen-savers that require passwords to disable be used, and that staff change passwords on a regular basis (and of course that they do not leave passwords on sticky notes near their computers.) The district staff technology security guidelines can be found here. Your comment is a good reminder that we need to do a better job of reminding staff members of this document.

I hope this makes sense. Please e-mail or call me if you ever have questions regarding the privacy of your children's data. It's a valid concern to raise.