user info is sotred securely on device