android:allowBackup="true"

It is complete dump not to do this! First you can protect your backup.ab with a password.