Proposal for notes

@cheddar -- thoughts?
I wonder if we shouldn't just have `source` be the combination of app and version for consistency?  DeviceId could be the thing that was used to do the upload (like Samsung-Android-1234 or something like that?)