Are you storing the authoken as part of the userData in the Account?
If so, anyone can access that. Perhaps you need to find a different
method to store your authtoken. You could look at creating your own
database using a Cursor or use SharedPreferences.

On May 27, 10:38 am, GroundZero <kgroundze...@gmail.com> wrote:
> I need to sync some data from a phone with a server in the cloud. To
> do so, it appears I must create an Account via the AccountManager. If
> I do this is there anyway to keep the authtoken private (e.g. not
> accessible to other apps). I understand the value of sharing
> authentication with services such as Gmail, Facebook, etc; however,
> the data I am trying to sync is sensitive and for security and
> performance reasons (e.g. limiting calls, etc.) I would like to
> control access to the associated APIs. Any help or suggestions would
> be greatly appreciated!

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to