Maybe I'm missing something here, but wouldn't the best "offline mode" be to never connect a sensitive phone/tablet to any internet-facing network?