Data bags are a great way to store user and application-specific data. Before long you'll want to store passwords and private keys in data bags as well. But, you might (and should) be worried about uploading confidential data to a Chef Server.
Chef offers encrypted data bag items to enable you to put confidential data into data bags, reducing the implied security risk.
Make sure you have a Chef repository and can access your Chef Server.
Let's create and encrypt a data bag item and see how we can use it:
mma@laptop:~/chef-repo $ mkdir data_bags/accounts
mma@laptop:~/chef-repo $ subl data_bags/accounts/google.json ...