1. An apparatus comprising: a browser interface to detect an attempt by web content to manipulate data in a local data store; a data management module to classify the data into a category if the data is remotely accessible; and a policy module to apply a security policy to the data based on the category.