The app’s sensitive data should always be stored in iCloud or Keychain in iOS or even in the database after proper encryption.