You need to be way more transparent about what you're storing and why - a native client app implies nothing in the middle.