The nice thing about SQL Server Compact is the database can be treated as a document. It's a single file, it's only "open" when being used and can use the standard set of security mechanisms that any other document can. You can set ACLs on the files, and you can encrypt the file with the Windows Encrypted...