I'm a little worried that my Mega Stones and hold items will be stolen by an NPC trainer.
Yes, NPC can use moves like thief. But, they can't keep items like a mega stone. Items like berries can be stolen, and you will not get them back. So, no need to worry, because you keep the mega stones. I hope I helped :)