I use mSecure, and I don't store my passwords on their server, my data is stored on Dropbox. mSecure encrypts the file that gets stored on Dropbox, so even if someone got past Dropbox's security, they wouldn't get anything out of it. (I'd prefer it if there were the option to store the password file on my own cloud server, though.)