I see a lot of great things coming from this, such as creating an infrastructure where the web team understands and has incentive to develop an API that will be

I see a lot of great things coming from this, such as creating an infrastructure where the web team understands and has incentive to develop an API that will be just as useful for the mobile team. I wonder about security though. How would you lock this down so that the data can be encrypted?