@Gary -- two things here.

1)You can choose to access all your Pogoplug files (including those on Remote Access shares) securely from the Web client by signing into your account at beta.pogoplug.com, going to Settings -> Security Settings, and checking the box next to "Use full security sessions". Any file access you do from the Web UI thereafter will happen through our service and will be encrypted.

2) If you do not have this option checked, any files you access from the UI locally (Pogoplug device is on the same subnet as the computer from which you are browsing) will be accessed directly from the Pogoplug device itself.

If by "sent directly to the remote device" you mean sent to a Remote Access share on a device on the same subnet as the computer you are browsing from, then yes, we access the files directly.

If by "sent directly to the remote device" you mean sent to a device on a different subnet from the computer you are browsing from, then the files need to be routed through our service. You can choose to encrypt this traffic by checking the box next to "Use full security sessions".